If you choose a payment method of the payment service provider Stripe, the payment is processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. You can find more information about Stripe’s data protection at the URL https://stripe.com/de/privacy#translation.

Stripe reserves the right to perform a credit check based on mathematical-statistical methods in order to protect its legitimate interest in determining the User’s ability to pay. The personal data necessary for a credit check and received in the course of payment processing may be transmitted by Stripe to selected credit agencies, which Stripe discloses to Users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the authorization to use the selected payment method.

You can object to this processing of your data at any time by sending a message to Stripe or the appointed credit agencies.

However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8) Online marketing

Facebook Pixel for the creation of Custom Audiences (with Cookie Consent Tool)

Within our online offer, the so-called “Facebook pixel” of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).

If a user clicks on an ad placed by us that is played on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our site allows data sharing with Facebook via pixels, this URL parameter is inscribed in the user’s browser via cookie, which our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.

With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display Facebook ads placed by us only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook’s data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve ads on and off Facebook.

The data processing associated with the use of the Facebook pixel is only carried out with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

9) Web analytics services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies”, which are text files that are stored on your terminal device and enable an analysis of your use of the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States and other countries. come in the USA.

This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. By extension, your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In the process, the IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other data from Google.

Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-based advertising and using third-party information via a special function known as “demographic characteristics”. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized orientation of marketing measures. However, data records collected via the “demographic characteristics” cannot be assigned to a specific person.

Details on the processing triggered by Google Analytics and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have notified us in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Google Analytics will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

10) Page functionalities

10.1 Facebook plugins with Shariff solution

Our website uses so-called social plugins (“plugins”) of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

In order to increase the protection of your data when visiting our website, these buttons are not unrestricted plugins, but are only integrated into the page using an HTML link. This type of integration ensures that no connection is yet established with Facebook’s servers when a page of our website containing such buttons is called up. When you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins there (after entering your login data, if applicable).

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php

10.2 Instagram plugin as shariff solution

Our website uses so-called social plugins (“plugins”) of the online service Instagram, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”).

In order to increase the protection of your data when visiting our website, these buttons are not unrestricted plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when a page of our website containing such buttons is called up, no connection is yet established with the servers of Instagram. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).

For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/

10.3 Use of Youtube videos

This website uses the Youtube embedding function to display and play videos from the provider “Youtube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider “Youtube” uses cookies to collect information about user behavior. According to information from “Youtube”, these are used, among other things, to collect video statistics, improve the user experience and prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. In the course of using Youtube, personal data may also be transmitted to the servers of Google LLC. come in the USA.

Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you give us permission in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Youtube videos will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please disable this service in the “Cookie Consent Tool” provided on the Website through alternative means communicated to you on the Website.

For further information on data protection at “Youtube”, please refer to the Youtube terms of use at https://www.youtube.com/static?template=terms and Google’s privacy policy at https://www.google.de/intl/de/policies/privacy.

10.4 Use of Vimeo videos

Plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

For the purpose and scope of the data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy

For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo’s own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called “cookies” for tracking, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States and other countries. come in the USA.

All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you give us permission in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Vimeo videos will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please disable this service in the “Cookie Consent Tool” provided on the Website through alternative means communicated to you on the Website.

10.5 – Zoom

We use the “Zoom” service provided by Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter “Zoom”) to conduct online meetings, video conferences and/or webinars.

In case of using Zoom, different data are processed. The scope of the data processed depends on the data you provide before or during participation in an online meeting, video conference or webinar. In the course of using Zoom, data of communication participants is processed and stored on Zoom servers. This data may include, in particular, your login data (name, email address, phone (optional) and password) and meeting data (subject, participant IP address, device information, description (optional)). Furthermore, visual and auditory contributions of the participants as well as voice inputs in chats can be processed.

When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the performance of pre-contractual measures), Art. 6 para. 1 lit. b DSGVO as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future.

Furthermore, the legal basis for data processing when conducting online meetings, videoconferences or webinars is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the effective implementation of the online meeting, webinar or video conference. For more information about Zoom’s use of data, please see Zoom’s privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html.

10.6 – FontAwesome

This site uses so-called web fonts from “FontAwesome”, a service of Fonticons, Inc, 710 Blackhorn Dr, Carl Junction, 64834, MO, USA (“FontAwesome”), for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to FontAwesome’s servers. This may also involve the transmission of personal data to FontAwesome’s servers in the USA. In this way, FontAwesome becomes aware that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.If your browser does not support web fonts, a default font will be used by your computer.

For more information about FontAwesome, please visit: https://fontawesome.com/privacy

10.7 Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in establishing individual ownership on the Internet and preventing abuse and spam. In the context of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come in the USA.

Further information on Google reCAPTCHA as well as Google’s privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/

To the extent legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO obtained. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

11) Tools and other

– DATEV

We use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany (“DATEV”).

DATEV processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to automatically record invoices, match them to transactions and create financial accounting from them in a partially automated process.

If personal data are also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business processes.

For more information about DATEV, the automated processing of data and data protection regulations, please visit https://www.datev.de/web/de/m/ueber-datev/datenschutz/.

12) Rights of the data subject

12.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:

– Right to information according to Art. 15 DSGVO;

– Right to rectification pursuant to Art. 16 DSGVO;

– Right to erasure pursuant to Art. 17 DSGVO;

– Right to restriction of processing pursuant to Art. 18 DSGVO;

– Right to information pursuant to Art. 19 GDPR;

– Right to data portability according to Art. 20 DSGVO;

– Right to revoke consent given in accordance with Art. 7 para. 3 GDPR;

– Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO, this data is stored until the data subject revokes his/her consent.

If there are legal retention periods for data that are required in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 Para. 1 lit. b DSGVO, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part to continue storing it.

When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 Para. 1 DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 Para. 2 GDPR exercises.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.