Privacy - JAYKAY

3.6.

You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict es to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this may result in some functions of our website being impaired and no longer functioning fully.  

3.7.
Provided that cookies are only used on our website with your consent, you can use the options described under 3.6 in our Cookie Consent Tool by clicking on the Cookiebot icon at the bottom left of the browser window.

4.data security 

4.1
All information that you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In particular, we transmit your personal data in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) coding system. 

5. use of Cookiebot 

5.1.
We have integrated the consent management tool "Cookiebot" (www.cookiebot.com) of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark on our website to request consent for data processing or the use of cookies or comparable functions. With the help of "Cookiebot" you have the possibility to give or refuse your consent for certain functionalities of our website, e.g. for the purpose of integration of external elements, integration of streaming content, statistical analysis, coverage measurement and personalized advertising. You can use "Cookiebot" to give or reject your consent for all functions or to give your consent for individual purposes or individual functions. The settings you have made can also be changed by you afterwards via the icon at the bottom left of the visited website. 

5.2.
The purpose of the integration of "Cookiebot" is es to allow the users of our website to decide on the aforementioned matters and to offer the possibility to change settings already made in the course of further use of our website. In the course of using "Cookiebot", personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to Usercentrics A/S. The information about the settings you have made is also stored on your device.  

5.3.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c), Art. 6 para. 3 sentence 1 lit. a), Art. 25, Art. 5 para. 2 GDPR and alternatively Art. 6 para. 1 lit. f) GDPR. We store the cookie required to store your consent on the basis of Section 25 (2) No. 2 TDDDG. Cookiebot helps us to process the data of our users in order to fulfill our legal obligations (e.g. obtaining informed consent and the obligation to provide proof thereof). Our legitimate interests in processing that goes beyond the obtaining and verifiability of the consent obtained lie in the evaluation of consent rates and other functionalities. 

5.4.
"Cookiebot" stores your data as long as your user settings are active. After one year after the user settings have been made, you will be asked for your consent again. The user settings made will then be stored again for this period, es unless you yourself delete the information about your user settings in the terminal device capacities provided for this purpose beforehand. We have concluded an order processing contract with Cookiebot.

5.5.
You may object to the processing insofar as the processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. You have the right to object on grounds relating to your particular situation. To object, please send an email to [email protected] 

6. no disclosure of your personal data  

6.1.
We do not disclose your personal data to third parties, es unless you have consented to the disclosure of data or we are entitled or obliged to disclose data on the basis of statutory provisions and/or official or court orders. In particular, es may be required to disclose information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights. 

7. data protection and third party websites 

7.1.
The Website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or warranty for third-party content or data protection conditions. Please make sure you are aware of the applicable data protection conditions before submitting personal data to these websites. 

8. use of functions of our website 

8.1.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide additional personal data, which we use to provide the respective service. If additional voluntary information is possible, this is marked accordingly. 

8.2.
When you contact us by e-mail or via the contact form, your e-mail address and, if you so indicate, your name and telephone number will be stored by us in order to answer your questions. (Legal basis is Art. 6 para.1 S. 1 lit. b DSGVO) 

9. use of the evaluation function 

9.1.
If you have consented to this in accordance with Art. 6 Para. 1 lit. a, Art. 49 Para. 1 lit. a DSGVO, we will use and transmit your e-mail address as well as the order number and the order date to the evaluation platform judge.me of Judge.me Ltd, c/o Buckworths, 1-3 Worship Street, London, EC2A 2AB, UK. They will send you an evaluation reminder by e-mail. 

9.2.
You can revoke your consent at any time for the future. 

9.3.
If you submit a rating, it will be published on our website. 

9.4.
The privacy policy of Judge.me can be found at: https://judge.me/privacy 

10. use of our webshop 

10.1.
If you wish to place an order in our webshop, es requires you to provide the personal data we need to process your order in order to conclude the contract. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may forward your payment data to our house bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the mandatory shopping cart cookie or the session cookie when you log in to our store is Section 25 (2) No. 2 TDDDG. 

You can voluntarily create a customer account, through which we can store your data for future purchases. When you create an account under "My account", the data you provide will be stored revocably. You can always delete all further data, including your user account, in the customer area. 

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information. 

10.2.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years, i.e. your data will only be used to comply with legal obligations. 

10.3.
To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology. 

10.4.
To implement our web store, we use the Shopify store system, which is provided by the service provider Shopify International Ltd, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We have concluded an order processing agreement with Shopify. For more information about Shopify's data processing, please visit. https://www.shopify.com/legal/privacy

10.5.
Depending on the payment method you have selected, we use various payment service providers to process payments, to which we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the respective payment service provider and only insofar as it is necessary for this purpose. 

10.6.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing. 

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full 

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments. 

10.7.
If payment is processed via Shopify Payments, payment is processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information on Stripe's data protection at the URL https://stripe.com/de/privacy#translation. 

11. newsletter 

11.1.
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. 

11.2.
We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not cancel your registration within 24 hours your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

11.3.
Only your e-mail address is required for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO. 

11.4.
You may revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details provided in the imprint. 

11.5.
We would like to point out that we evaluate your user behavior when sending the newsletter. In particular, we collect data about delivery rates, how many subscribers have unsubscribed, how many have clicked on links in the email, information about spam, bounces, etc.. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned in section 3 and the web beacons with your e-mail address and an individual ID. The information about your user behavior is collected exclusively pseudonymously, i.e. the IDs are not linked to your other personal data, a direct personal reference is excluded. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via another contact channel as shown above. The information will be stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.  

11.6.
We use, among others, rapidmail for sending newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. Among other things, rapidmail is used to organize and analyze the dispatch of newsletters. The data you enter for the purpose of receiving the newsletter is stored on rapidmail's servers in Germany. If you do not want any analysis by rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. For the purpose of analysis, the e-mails sent with rapidmail contain a so-called tracking pixel, which connects to the servers of rapidmail when the e-mail is opened. In this way, it can be determined whether a newsletter message has been opened. Furthermore, with the help of rapidmail, we can determine whether and which links in the newsletter message are clicked. Optionally, links in the e-mail can be set as tracking links, with which your clicks can be counted. 

11.7.
In addition, we also use our service provider Shopify International Ltd. Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland to send newsletters. We have concluded an order processing agreement with Shopify. For more information about Shopify's data processing, please visit. https://www.shopify.com/legal/privacy

12. social media profiles 

12.1.
We have various presences in so-called social media platforms. We operate the presences with the following providers 

12.1.1.
Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland, privacy notice available at https://privacycenter.instagram.com/policy

12.1.2.
TikTok, operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, data protection information at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

12.1.3.
LinkedInoperated by Linkedin Ireland Unlimited Compnay, Wiltom Plaza, Wilton Place, Dublin 2, Ireland, privacy policy at https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy

12.1.4.
Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland, privacy policy at https://www.facebook.com/privacy/center

12.2.
We use the technical platform and services of the providers for these information services. We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is stored on your device in the form of cookies. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us. The legal basis in each case is your consent: for the setting of cookies this is § 25 para. 1 TDDDG, for the subsequent data processing Art. 6 para. 1 lit. a GDPR. 

12.3.
The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an appropriate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded the standard data protection clauses with the companies. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites es enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device and restart your browser. 

12.4.
As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 para. 1 p. 1 lit. f DSGVO. 

12.5.
To exercise your data protection rights, you can contact both us or the provider of the social media platform. To the extent that one party is not responsible for responding or must obtain the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling, processing of your data when using the website. For questions about the processing of your interaction with us on our site, write to the contact details provided by us above. 

12.6.
The information that the social media platform receives and how it is used is described by the providers in their privacy policies (see link in the table above). There you will also find information about contact options and the settings options for advertisements. Further information on social networks and how you can protect your data can also be found at www.youngdata.de. 

13. third-party tools 

13.1
Use of Google Tag Manager 

13.1.1.
This website uses Google Tag Manager, a cookie-less domain that does not collect any personal data. 

13.1.2.
The tool provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have made a deactivation at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. 

13.1.3.
Google Tag Manager is used in the interest of easy administration and development of our website. The Google Tag Manager serves an efficient control of content on different pages, reduces error potential, prevents outdated processes and thus also ensures safe appearances for the user. The legal basis for the use is Art. 6 para. 1 lit. a DSGVO. 

13.2.
Use of Google Maps 

13.2.1.
We use the Google Maps service on this website. We use Google maps in conjunction with the service provider snazzymaps to embed maps from Google Maps in our website with a customized design. The provider is Atmist, 10940 - 166A St Unit 201, T5P 3V5 Edmonton, Canada. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.2.2.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. 

13.2.3.
The collected information is stored on Google servers, also in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.2.4.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

13.2.5.
Information about Snazzy Maps is available at: https://snazzymaps.com

13.3.
Use of Google Analytics 

13.3.1.
This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is es to enable us to analyze your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.

13.3.2.
We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function ("IP masking"), i.e. that Google truncates the IP addresses by the last octet within the EU/EEA. 

13.3.3.
Google acts as an order processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.3.4.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Any necessary cookies will also only be set with your consent in accordance with Section 25 (1) TDDDG. You can withdraw your consent at any time without this affecting the permissibility of processing up to the time of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=de/. 

13.3.5.
You can find more information on the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which Google states should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/. 

13.4.
Use of Google Analytics 

13.4.1.
This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is es to enable us to analyze your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.

13.4.2.
We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function ("IP masking"), i.e. that Google truncates the IP addresses by the last octet within the EU/EEA. 

13.4.3.
Google acts as an order processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.4.4.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Any necessary cookies will also only be set with your consent in accordance with Section 25 (1) TDDDG. You can withdraw your consent at any time without this affecting the permissibility of processing up to the time of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=de/. 

13.4.5.
You can find more information on the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which Google states should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/. 

13.5.
Google Conversion Tracking 

13.5.1.
We use Google Ads with the additional application "Google Conversion Tracking". This is es is a procedure with which we can check the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical provision, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular and, if applicable, further information about the consequences of the advertisement. 

13.5.2.
The legal basis for the processing of your data in this respect is also Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. You can prevent or stop using the conversion tracking function in the same way as previously described for Google Ads at es . If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.

13.6.
Google Remarketing 

13.6.1.
We use Google Ads with the additional application "Google Remarketing". This procedure allows us to create advertisements based on existing information about you and to address you again when you continue to use the Internet. This is done by means of cookies set when you visit our offers (usually by cookies), via which your usage behavior when visiting various websites is recorded by Google and evaluated pseudonymously. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. 

13.6.2.
The legal basis for the processing of your data in this respect is also Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.7.
DoubleClick by Google 

13.7.1.
This website continues to use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Via a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later calls up the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. 

13.7.2.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it. 

13.7.3.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent. 

13.7.4.
The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.7.5.
Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google. de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. We would like to point out that there is currently no adequate level of data protection in the USA and es there is also no adequacy decision by the EU Commission. We would also like to point out that due to the CLOUD Act and other regulations (e.g. intelligence collection powers under Section 702 FISA and Executive Order 12 333), US authorities can access this data and you are not entitled to the data subject rights in the USA as is the case within the EU. 

13.8.
Facebook (Meta) Custom Audiences 

13.8.1.
Furthermore, the website uses the remarketing function "Website Custom Audiences" of Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the social network Facebook or other websites that also use this procedure. We thereby pursue the interest of displaying advertisements that are of interest to you in order to make our website more interesting for you. 

13.8.2.
Due to the marketing tools used, your browser automatically establishes a direct connection with Meta's server. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Meta Website Custom Audiences, Meta receives the information that you have called up the corresponding web page of our website or clicked on an advertisement from us. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features. 

13.8.3.
Deactivation of the "Facebook Custom Audiences" function is available for logged-in users at https://www.facebook.com/settings/?tab=ads#_möglich.

13.8.4.
The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.8.5.
Further information on data processing by Meta can be found at https://www.facebook.com/about/privacy. We would like to point out that there is currently no adequate level of data protection in the USA and es there is also no adequacy decision by the EU Commission. We would also like to point out that due to the CLOUD Act and other regulations (e.g. intelligence collection powers under Section 702 FISA and Executive Order 12 333), US authorities can access this data and you are not entitled to the data subject rights in the USA as is the case within the EU.

13.9.
A/B Testing 

13.9.1.
This website continues to analyze user behavior by means of A/B testing. This allows us to show you our websites with slightly different content, depending on the profile assignment made. This allows us to analyze and regularly improve our offering and make it more interesting for you as a user. The legal basis for A/B testing is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.9.2.
For this analysis, the above-mentioned basic data such as IP address and time stamp are stored on your terminal device. Before the analyses are carried out, the IP addresses are further processed in abbreviated form, which means that a direct link to a person can be ruled out. The IP address transmitted by your browser is not merged with other data collected by us. 

13.9.3.
You may revoke your consent at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke is via our Consent Manager or via the following functions: You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use our website in full. Preventing the storage of cookies is possible through the setting in your browser. 

13.10.
Use of Hotjar 

13.10.1.
This website uses functions of the web analytics service Hotjar. The provider is Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

13.10.2.
We use Hotjar to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. On behalf of the operator of this website, Hotjar will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The information generated by the cookie about your use of the website will be transmitted to and stored by Hotjar on servers in the United States.

13.10.3.
We use Hotjar's anonymization feature on this website. This shortens your IP address and ensures that the analytics data is not personally identifiable. We do not merge the data with other personal data. 

13.10.4.
We only use the tool in case of your consent, which you can give via the Consent Manager, legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO. You can also opt out of the analysis function by simply activating the standard "Do not Track" function in your browser. In this case, we will not process your personal data in the manner described here. An explanation of how to activate the "Do not Track" function can be found at this link: www.hotjar.com/legal/compliance/opt-out/

13.10.5.
If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.11.
Elfsight Instagram Wall Deployment 

13.11.1.
We use the Elfsight Instagram Wall plugin from the provider SP Iusupov A.A. (operator of elfsights.com). The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.

13.11.2.
We use the plug-in to better display our Instagram feed on our website. 

13.11.3.
The collected information is stored on servers of the providers, in case of international providers also outside Europe. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.11.4.
You can revoke your consent at any time without affecting the permissibility of the processing until revocation. The easiest way to revoke your consent is to use our Consent Manager. 

13.11.5.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please contact https://elfsight.com/privacy-policy/

13.11.6.
We would like to point out that there is currently no adequate level of data protection in the USA and es there is also no adequacy decision by the EU Commission. We would also like to point out that due to the CLOUD Act and other regulations (e.g. intelligence collection powers under Section 702 FISA and Executive Order 12 333), US authorities can access this data and you are not entitled to the data subject rights in the USA as is the case within the EU. 

13.12.
Integration of the Trusted Shops Trustbadge 

13.12.1.
If you have given your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings) and to offer Trusted Shops products to shoppers after they have placed an order. 

13.12.2.
The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible for data protection according to Art. 26 DSGVO. In the following, we inform you about the essential contractual contents according to Art. 26 (2) DSGVO within the framework of this data protection notice. 

13.12.3.
Within the framework of the joint responsibility existing between us and Trusted Shops, please contact Trusted Shops preferably in case of data protection questions and to assert your rights using the contact details provided in the data protection information specified in the data protection information. Irrespective of this, however, you can always contact the data controller of your choice. Your inquiry will then be forwarded to the other responsible party for a response, if necessary.

13.12.4.
The trust badge is provided by a US-American CDN provider (content delivery network). An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures.  

13.12.5.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to you personally. The anonymized data is used in particular for statistical purposes and for error analysis. 

13.12.6.
If you have given your consent, the trust badge accesses order information stored in your terminal device (order total, order number, purchased product if applicable) and email address after order completion and your email address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops with the order information pursuant to Art. 6 (1) p. 1 lit. a DSGVO. This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing is carried out in accordance with the contractual agreement between you and Trusted Shops. contractual agreement. If you are not yet registered for the services or do not give your consent to automatic recognition via the trust badge, you will subsequently be given the opportunity to manually register for the use of the services or to complete the protection within the framework of your possibly already existing user contract.

13.12.7.
For this purpose, the Trustbadge accesses the following information stored in the terminal device you use after you have completed your order: Order total, order number and email address. This is necessary so that we can offer you buyer protection. The data is only transmitted to Trusted Shops if you actively decide to conclude the buyer protection by clicking on the correspondingly designated button in the so-called trust card. If you decide to use the services, the further processing is based on the contractual agreement with Trusted Shops pursuant to Art. 6 (1) lit. b DSGVO, in order to complete your registration for buyer protection and to secure the order and, if necessary, to be able to send you rating invitations by e-mail afterwards. 

13.12.8.
Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 Para. 1 lit. f DSGVO for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual measures and in the case of Israel by an adequacy decision. Further information can be found here.

13.13.
YouTube video integration 

13.13.1.
We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. [These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer]. The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. We set the cookie required to play the videos in accordance with Section 25 (2) No. 2 TDDDG, as this is a mandatory technical requirement. 

13.13.2.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. 

13.13.3.
The collected information is stored on Google servers, also in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.13.4.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. 

13.14.
Use of Vimeo 

13.14.1.
On our website we integrate the service "Vimeo", which is provided by Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. 

13.14.2.
On some of our pages we use plugins of the provider Vimeo. If you call up the pages of our online offer provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which of our pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. 

13.14.3.
The privacy policy of Vimeo Inc. can be viewed here:vimeo.com/privacy

13.14.4.
The data is processed on the basis of our legitimate interest, i.e. the optimization of our offer and our website in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. The transmission of the technically required data to Vimeo also takes place on the same legal basis. The technically required cookie for playing the videos is set on the basis of Section 25 (2) No. 2 TDDDG. 

13.14.5.
In order to ensure an appropriate level of data protection when transferring data to the USA, we have concluded the EU standard contractual clauses with the provider of Vimeo in the so-called "controller to controller" variant. As further protective measures, we always include videos from Vimeo in the "Do Not Track" variant, so that personal data is only transmitted to Vimeo in a minimal way. In addition, the provider of Vimeo has committed to us to continue to comply with the self-imposed obligations from the former so-called Privacy Shield Agreement. 

13.15.
LinkedIn Insight Day 

13.15.1.
Furthermore, the website uses the so-called LinkedIn Insight tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company ("LinkedIn"). By integrating this JavaScript tag, you as a user of our website can be shown interest-based advertisements ("Ads") relevant to you when visiting the LinkedIn social network or other websites that also use the method, and we receive statistics about website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn Ads and interest in our offers, by means of a conversion tracking function and display LinkedIn Ads to you on other websites via retargeting. In this way, we pursue the interest of improving the effectiveness of the LinkedIn ads and making our website more interesting for you. 

13.15.2.
By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection with the server of LinkedIn, both when visiting the LinkedIn website and websites that have the LinkedIn Insight tag built in. LinkedIn and we are jointly responsible for the collection of your usage data when you visit our website and the transmission to the provider, but LinkedIn is solely responsible for the relevant processing to carry out the described objectives once the data has been transmitted. We have no influence on the scope and nature of the use of the data by LinkedIn, we therefore inform you according to our state of knowledge: Through the integration of the LinkedIn Insight tag, LinkedIn receives the information that you have accessed the corresponding web page of our website, or clicked on an ad from us. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, it is possible that the provider learns your IP address, time slot and other identifying characteristics and links them to the actions assigned to you. 

13.15.3.
The deactivation of the LinkedIn Insight tag and other advertising objections are possible in the settings for advertisements at www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=en and additionally at www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further setting options and information can be found in the LinkedIn Privacy Center: privacy.linkedin.com/de-de?lr=1/. 

13.15.4.
The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.15.5.
LinkedIn also processes your personal data in the USA and has imposed a standard on itself that corresponds to the former EU-US Privacy Shield. We have also agreed to so-called standard data protection clauses with LinkedIn, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.15.6.
Further information on data processing by LinkedIn can be obtained from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight tag: business.linkedin.com/de-de/marketing-solutions/insight-tag?lr=1/; data protection information: www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy/. 

13.16.
Advertising with Meta (Pixel and Conversion Tracking) - formerly Facebook 

13.16.1.
Furthermore, the Website uses advertising measures of Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland. ("Meta"). By integrating the so-called "Meta Pixel" on our website, we can display our advertising measures ("Facebook Ads") to users of our website and the social network Facebook and measure and evaluate their success ("Conversion Tracking"). This connection between Meta and our website is made technically via the "Meta Pixel". The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.16.2.
Due to the marketing tools used, your browser automatically establishes a direct connection with Meta's server when you visit our website. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore present you with the processes known to us: Through the integration of the Meta pixel, Meta receives the information that you have called up the corresponding web page of our website, or clicked on an advertisement from us. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, it is possible that the provider will learn your IP address and other identifying features and use them to create a profile. 

13.16.3.
The information collected is stored on Meta's servers, also in the USA. For these cases, the provider has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Meta, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. 

13.16.4.
You may revoke your consent at any time without affecting the permissibility of the processing until revocation. The easiest way to revoke is via our Consent Manager. In addition, (only logged in users) can object via the provider's function under the following link: www.facebook.com/settings/?tab=ads#_ possible. 

13.16.5.
For more information on data processing by Facebook, please contact Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland; Privacy Policy: www.facebook.com/about/privacy. 

13.16.6.
We also use the remarketing function "Custom Audiences" which also uses the Facebook Pixel and to display interest-based advertisements when you visit our website or other websites that have also integrated the Facebook Pixel. This allows us to show you advertisements that are of interest to you in order to make our website more interesting for you and to market our offer. 

14. recipients or categories of recipients  

14.1.
If we pass on your personal data to third parties, you will be explicitly informed of this in the description of the respective data processing (e.g. when using our contact form). Of course, we also use external service providers for technical and organizational processing, with whom we have concluded corresponding order processing contracts within the meaning of Art. 28 GDPR. These are, for example, service providers for web hosting, sending emails, maintenance and servicing of our IT systems, etc.

15. storage period 

15.1.
Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but at the longest for as long as any statutory provisions require us to do so (e.g. under commercial law we are obliged to keep business letters, which may also include emails, for 10 years). 

15.2.
As soon as the purpose of storage no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted. 

16. your rights 

16.1.
You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and can request the correction and/or deletion and/or blocking of your personal data. You can also request a restriction of processing and have a right to object and a right to data portability. If you wish to assert one of your rights and/or receive more information about this, please contact us at [email protected] 

16.2.
In addition, you have the right to lodge a complaint with a supervisory authority. If you have any questions, comments or requests regarding the collection, processing and use of your personal data by us, please also contact us using the contact details provided. 

17. right of objection 

Right to object on a case-by-case basis 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (e) or (f) DSGVO; this also applies to profiling based on these provisions.  

We will no longer process the personal data concerning you, es unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. 

Right to object to processing of data for direct marketing purposes 

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that es is related to such direct marketing. 

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. 

You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications. 

18. no obligation to provide personal data 

18.1.
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, es may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products and services offered by us as presented above, you will be informed of this separately.