data protection
1) Introduction and contact details of the responsible person
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Salino GmbH, Taunusstraße 144, 41236 Mönchengladbach, Germany, Tel.: +49 211 15856577, Email: aero@salino.eu The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
2) Data collection when visiting our website
When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary so that we can display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer through which you accessed this page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is based on Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
3) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies, which are small text files that are stored on your device. In some cases, these cookies are automatically deleted after you close your browser (so-called "session cookies"), while in other cases, they remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.
Insofar as personal data is also processed by individual cookies used by us, the processing is based on Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.
You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or in general.
Please note that the functionality of our website may be limited if you do not accept cookies.
4) Making contact
4.1 Hubspot
We use the email ticketing system of the following provider to process customer requests: HubSpot Ireland Ltd, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
When you submit contact requests via email through our website, these are stored and organized in the ticketing system to ensure chronological processing and improve your service experience. You can check the current status of your request at any time using your individually assigned ticket number.
For the organization and processing of inquiries, personal data, depending on the scope of its provision, but in any case name, first name and e-mail address, are collected, transmitted to the provider, stored there and read.
The legal basis for processing this data is our legitimate interest in the efficient design of our customer service, in answering your request as quickly as possible and in optimizing our service offering in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
4.2 When you contact us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.
5) Data processing when opening a customer account
In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this data when opening a customer account. Please refer to the input fields of the corresponding form on our website for the data required to open an account.
You can delete your customer account at any time by sending a message to the data controller's address listed above. After your customer account is deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods apply, and we have no legitimate interest in further storing your data.
6) Comment function
When you use the comment function on this website, information about the time your comment was posted and your chosen username will be stored and published on this website. For security reasons, your IP address will also be stored to allow us to identify the author of any unlawful comments. Your email address will be stored so that we can contact you if a third party objects to your published content as being unlawful.
The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
7) Use of customer data for direct marketing
7.1 Subscribe to our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. Only your email address is required to send the newsletter. Providing further information is voluntary and helps us to personalize our communications with you. We use the double opt-in procedure for sending the newsletter, which ensures that you only receive newsletters if you have explicitly confirmed your consent to receive them by clicking a confirmation link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We store your IP address, provided by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter will be used exclusively for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to use your data beyond this scope, which is legally permissible and about which we inform you in this statement.
7.2 Advertising by postal mail
Based on our legitimate interest in personalized direct marketing, we reserve the right to store and use your first and last name, postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR in order to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time.
7.3 Notification of product availability via email
For items that are temporarily unavailable, you can register to be notified by email when products become available. In this case, we will send you a one-time email notification about the availability of your selected item. Only your email address is required to send this notification. Providing additional information is voluntary and may be used to personalize our communications with you. We use a double opt-in process for sending emails, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking a confirmation link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We store your IP address, provided by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service regarding the availability of goods will be used exclusively for the intended purpose.
You can unsubscribe from availability notifications at any time by sending a message to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to the further use of your data or we reserve the right to use your data beyond this scope, as permitted by law, which we will inform you about in this statement.
8) Data processing for order processing
8.1 Image files can be submitted for order processing via the upload function.
On our website, we offer customers the option to personalize products by uploading image files. The uploaded image will be used as a template for personalizing the selected product.
The customer can use the upload form on the website to transmit one or more image files directly to us from the storage of their device via automated, encrypted data transfer. We then collect, store, and use the transmitted files exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to specific service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. No further transfer will take place. Insofar as the transmitted files or digital images contain personal data (in particular, images of identifiable persons), all of the aforementioned processing is carried out exclusively for the purpose of processing your online order in accordance with Article 6 Paragraph 1 Letter b GDPR.
After the order has been fully processed, the submitted image files will be automatically and completely deleted.
8.2 Image files for order processing can be submitted via email.
On our website, we offer customers the option of ordering product personalization by submitting image files via email. The submitted image will be used as a template for personalizing the selected product.
The customer can send us one or more image files from their device's storage via the email address provided on the website. We then collect, store, and use the files transmitted in this way exclusively for the production of the personalized product, as defined in the respective service description on our website. If the transmitted image files are shared with specific service providers for the production and processing of the order, you will be explicitly notified of this in the following paragraphs. No further sharing will take place. Insofar as the transmitted files or digital images contain personal data (in particular, images of identifiable persons), all the aforementioned processing operations are carried out exclusively for the purpose of processing your online order in accordance with Article 6(1)(b) GDPR.
After the order has been fully processed, the submitted image files will be automatically and completely deleted.
8.3 Insofar as it is necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided when placing your order (name, address, email address) in order to inform you in accordance with our legal obligation to provide information pursuant to Art. 6 para. 1 lit. c GDPR by suitable means of communication (e.g., by post or email). Your contact details will be used exclusively for the purpose of informing you about updates owed to you by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service providers, who support us in whole or in part in fulfilling the concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
8.4 Transfer of personal data to shipping service providers
8.5 German postal service
We use the following provider as our transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.6 DHL
We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.7 DHL Freight
We use the following provider as our transport service provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.8 FedEx
We use the following provider as our transport service provider: FedEx Express Deutschland GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.9 TNT
We use the following provider as our transport service provider: TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.10 UPS
We use the following provider as our transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany
We will forward your email address and/or telephone number to the supplier in accordance with Article 6 Paragraph 1 Letter a of the GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, we will only forward the recipient's name and delivery address to the supplier for delivery purposes in accordance with Article 6 Paragraph 1 Letter b of the GDPR. This data is only shared to the extent necessary for the delivery of the goods. Prior coordination of the delivery date with the supplier or delivery notification is not possible in this case.
Consent can be withdrawn at any time with effect for the future by contacting the above-mentioned responsible person or the provider.
8.11 Use of payment service providers (payment services)
- Paypal
This website offers one or more online payment methods from the following provider: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method offered by the provider that requires you to pay in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will only be shared with the provider for the purpose of processing the payment and only to the extent necessary for this purpose.
If you choose a payment method where the provider makes an advance payment (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of an alternative payment method).
To protect our legitimate interest in assessing the creditworthiness of our customers, we forward this data to the provider for the purpose of credit assessment in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide, as well as other data (e.g., shopping cart contents, invoice amount, order history, payment history), the provider checks whether your chosen payment option can be granted with regard to payment and/or default risks.
Credit reports may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the information used to calculate these score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system by PayPal, which consists of PayPal's own payment methods and local third-party payment methods.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay later" via PayPal, we forward your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
For payments made via credit card through PayPal, direct debit through PayPal, or – if offered – "Pay Later" through PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check, in the form of the statistical probability of payment default, to decide whether to offer the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the information used to calculate the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If you select the PayPal payment method "Purchase on account," your payment details will first be transmitted to PayPal to prepare the payment. PayPal will then forward these details to Ratepay GmbH, Franklinstrasse 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis for this is Article 6(1)(b) GDPR. In this case, Ratepay conducts an identity and credit check on its own behalf to determine your creditworthiness, as described above, and transmits your payment details to credit agencies based on its legitimate interest in determining creditworthiness, pursuant to Article 6(1)(f) GDPR. A list of the credit agencies that Ratepay is permitted to use can be found here: https://www.ratepay.com
When using a local third-party payment method, your payment data will first be sent to PayPal to prepare the payment in accordance with Article 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the respective provider to process the payment in accordance with Article 6(1)(b) GDPR.
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For more information about data protection, please see PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- IMMEDIATELY
This website offers one or more online payment methods from the following provider: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
If you choose a payment method offered by the provider that requires you to pay in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will only be shared with the provider for the purpose of payment processing and only to the extent necessary for this purpose.
- Stripe
This website offers one or more online payment methods from the following provider: Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you choose a payment method offered by the provider that requires you to pay in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will only be shared with the provider for the purpose of processing the payment and only to the extent necessary for this purpose.
If you choose a payment method where the provider makes an advance payment (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of an alternative payment method).
To protect our legitimate interest in assessing the creditworthiness of our customers, we forward this data to the provider for the purpose of credit assessment in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide, as well as other data (e.g., shopping cart contents, invoice amount, order history, payment history), the provider checks whether your chosen payment option can be granted with regard to payment and/or default risks.
Credit reports may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the information used to calculate these score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
9) Online marketing
9.1 Facebook Pixel for creating Custom Audiences
Within our online services, we use the "Facebook Pixel" service provided by the following company: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
When a user clicks on one of our Facebook ads, a parameter is inserted into the URL of the linked page using the "Facebook Pixel". This URL parameter is then entered into the user's browser after redirection via a cookie set by our linked page itself.
This allows Facebook to identify visitors to our website as a target audience for advertising (so-called "Facebook Ads"). Accordingly, we use this service to display our Facebook ads only to those Facebook users who have shown an interest in our website or who exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited websites) that we transmit to Facebook (so-called "Custom Audiences").
Secondly, the Facebook pixel can be used to track whether users were redirected to our website after clicking on a Facebook ad and what actions they take there (so-called conversion tracking).
The data collected is anonymous to us, meaning it does not allow any conclusions to be drawn about the user's identity. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies to read information about the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
The information generated by Facebook is usually transmitted to and stored on a Facebook server; in this context, it may also be transmitted to servers of Meta Platforms Inc. in the USA.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
9.2 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses "web beacons" (small, invisible graphics) to collect information that allows simple actions, such as website traffic, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to and stored by Google on servers in the United States.
Google uses the information obtained in this way to analyze your usage behavior in relation to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if these third parties process the information on Google's behalf.
All processing described above, in particular the reading of information about the device used via cookies and/or web beacons, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your visit to the website.
You can withdraw your consent at any time with effect for the future by disabling this service in the "cookie consent tool" provided on the website.
You can view Google's privacy policy here: https://www.google.de /policies /privacy /
9.3 HubSpot
This website uses the software-based marketing service of the following provider for the provision and synchronization of various customer management services: HubSpot Ireland Ltd, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
The service enables the automated processing of feed activities, the control of advertising in the marketing channels used, the analysis of the success of marketing measures, as well as centralized email marketing and contact management.
Cookies are used to fulfill various functions; these are small text files that are stored locally in your web browser's cache on your device and allow us to analyze your use of the website. The cookies collect certain information, such as your IP address, location, and the time of your visit.
All processing described above, in particular the setting of cookies to read information about the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Other legal bases for data processing that apply within the scope of certain service functions (e.g. the requirement of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR for sending newsletters) remain unaffected.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
10) Web analytics services
10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
Google (Universal) Analytics is used on this website exclusively without the use of cookies, meaning the service does not place any cookies on your device at any time.
Instead, a unique ID assigned by Google (Universal) Analytics is stored in your browser's local memory, enabling analysis of your website usage. For this purpose, certain user information is processed via this ID. This information includes your IP address, which Google, however, truncates by removing the last digits to prevent direct identification of individuals.
The information is transferred to and processed on Google servers. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics, which is shortened, will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All processing described above, including the storage of information on the device used in the form of the ID card, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Google (Universal) Analytics will not be used during your visit to the website without your consent. You can withdraw your consent at any time with effect for the future.
To exercise your right of withdrawal, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plugin, or when using browsers on mobile devices, you can withdraw your consent by clicking the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):
Disable Google Analytics
We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prevents unauthorized disclosure to third parties.
For the transfer of data to the USA, Google refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Further legal information regarding Google (Universal) Analytics, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com /privacy ?hl=de &gl=de and under https://policies.google.com /technologies /partner-sites
Demographic characteristics
Google (Universal) Analytics uses the special "Demographics" feature to generate statistics about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third-party providers. This allows for the identification of target groups for marketing activities. However, the collected data cannot be linked to a specific individual and is deleted after a storage period of two months.
Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com . You can find more information about Google Signals at this link: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
This website may use the "UserIDs" function as an extension of Google (Universal) Analytics. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.
10.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
Google Analytics 4 does not use cookies by default when you visit the website unless you explicitly consent to their use. Instead, information about your usage behavior is collected and processed through so-called pings (small data packets sent to the host of a device). This information includes your IP address, which Google, however, truncates by removing the last digits to prevent direct identification of individuals.
The information is transferred to Google's servers and processed there. This may also involve transfer to Google LLC, which is based in the USA.
Google will use the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics and shortened will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be stored for a period of two months and then deleted.
All processing described above, including the transmission of data via "pings" and the possible setting of Google Analytics cookies, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR.
Google Analytics 4 will not be used during your visit to the website without your consent. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with Google that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, Google refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com /privacy ?hl=de &gl=de and under https://policies.google.com /technologies /partner-sites
Demographic characteristics
Google Analytics 4 uses the special "Demographics" feature to generate statistics about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third-party providers. This allows for the identification of target groups for marketing activities. However, the collected data cannot be linked to a specific individual and is deleted after a storage period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com /ads /answer /2662922 ?hl=de You can find more information about Google Signals at this link: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
This website may use the "UserIDs" function as an extension of Google Analytics 4. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.
10.3 Google Tag Manager
This website uses the "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and calibrating, controlling, and stratifying them via a unified user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not perform any independent data analysis. However, when a page is accessed, the Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers of Google LLC in the USA is also possible.
This processing only takes place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, the Google Tag Manager will not be used during your visit to the website. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
11) Retargeting/remarketing and conversion tracking
– Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com /technologies /partner-sites
All of the processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de /policies /privacy /
– Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform from the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address. The use of GMP may also result in the transmission of personal data to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
The privacy policy of GMP by Google can be found here: https://www.google.de /policies /privacy /
12) Functionalities of the site
12.1 Facebook plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
These plugins enable direct interaction with the content of the social network.
To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page on our website containing such plugins is accessed, no connection to the provider's servers is established yet.
Only when you activate the plugins and thereby consent to the data transfer in accordance with Art. 6 para. 1 lit. a GDPR, will your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged into an existing user profile, a certain amount of information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about the interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the plugin by clicking it again. However, this withdrawal does not affect data that has already been transmitted to the provider.
The data may also be transferred to: Meta Platforms Inc, USA
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.2 Instagram plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
These plugins enable direct interaction with the content of the social network.
To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page on our website containing such plugins is accessed, no connection to the provider's servers is established yet.
Only when you activate the plugins and thereby consent to the data transfer in accordance with Art. 6 para. 1 lit. a GDPR, will your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged into an existing user profile, a certain amount of information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about the interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the plugin by clicking it again. However, this withdrawal does not affect data that has already been transmitted to the provider.
Data can also be transferred to: Meta Platforms Inc. (USA)
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.3 LinkedIn plugins
Our website uses plugins from the social network of the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
These plugins enable direct interaction with the content of the social network.
To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page on our website containing such plugins is accessed, no connection to the provider's servers is established yet.
Only when you activate the plugins and thereby consent to the data transfer in accordance with Art. 6 para. 1 lit. a GDPR, will your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged into an existing user profile, a certain amount of information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about the interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the plugin by clicking it again. However, this withdrawal does not affect data that has already been transmitted to the provider.
The data may also be transferred to: LinkedIn Inc. in the USA
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.4 YouTube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The data may also be transferred to: Google LLC in the USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to the site, your data will be directly associated with your account when you click on a video. If you do not want this to be associated with your account, you must log out before clicking the play button.
All of the aforementioned processing activities, in particular the setting of cookies to read information about the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.5 Vimeo
This website uses plugins for displaying and playing videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to the site, your data will be directly associated with your account when you click on a video. If you do not want this to be associated with your account, you must log out before clicking the play button.
All of the aforementioned processing activities, in particular the setting of cookies to read information about the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.6 Online applications via a form
On our website, we advertise current job openings in a dedicated section, for which interested parties can apply via a corresponding form.
Applicants must provide all personal data necessary for a thorough assessment, including general information such as name, address, and contact details, as well as, where applicable, performance-related evidence and health-related information. Details of the application process can be found in the job posting.
When you submit the form, your application data is transmitted to us in encrypted form using state-of-the-art technology, stored by us, and evaluated solely for the purpose of processing your application. This processing is based on Article 6 Paragraph 1 Letter b of the GDPR (or Section 26 Paragraph 1 of the German Federal Data Protection Act (BDSG)), according to which completing the application process is considered the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information on severe disability) are requested from applicants during the application process, the processing is based on Article 9(2)(b) GDPR. This processing is necessary for us to exercise our rights under employment, social security, and social protection law and to fulfill our related obligations.
Alternatively or cumulatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the management of health or social sector systems and services.
If an applicant is not selected or withdraws their application prematurely, their data submitted via the form and all electronic correspondence, including the application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.
12.7 Applications for job postings via email
Current job openings are advertised in a dedicated section on our website, and interested parties can apply by email to the contact address provided.
Applicants must provide all personal data necessary for a thorough assessment, including general information such as name, address, and contact details, as well as, where applicable, performance-related evidence and health-related information. Details of the application process can be found in the job posting.
Upon receipt of your application via email, the data will be stored and evaluated solely for the purpose of processing your application. For any follow-up questions, we will use either the applicant's email address or telephone number. This processing is based on Article 6 Paragraph 1 Letter b of the GDPR (or Section 26 Paragraph 1 of the German Federal Data Protection Act (BDSG)), according to which the application process is considered the initiation of an employment relationship.
Insofar as special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information on severe disability) are requested from applicants during the application process, the processing is based on Article 9(2)(b) GDPR. This processing is necessary for us to exercise our rights under employment, social security, and social protection law and to fulfill our related obligations.
Alternatively or cumulatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the management of health or social sector systems and services.
If an applicant is not selected or withdraws their application prematurely, their submitted data and all electronic correspondence, including the application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in the case of processing in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.
12.8 - Google Web Fonts
This page uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you visit a website, your browser loads the necessary web fonts into its browser cache to ensure correct display of text and fonts, and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
The data may also be transferred to the following: Google LLC, USA
The processing of personal data during the connection process with the font provider only occurs if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.9 Google reCAPTCHA
On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts," i.e., fonts that are downloaded from the internet by Google. In this case, no information other than that mentioned above, which is already transmitted to Google via the reCAPTCHA functionality, is processed.
The service checks whether an entry is made by a natural person or is being made abusively through automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not an automated bot, Cloudflare Turnstile collects the IP address of the device used, identification data of the browser and operating system type, as well as the date and duration of the visit, and transmits this information to the provider's servers for analysis.
The legal basis is our legitimate interest in establishing ownership of rights on the internet and preventing misuse and spam pursuant to Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.10 Google Translate
This website uses the "Google Translate" translation service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. To ensure the translation is automatically displayed after you select a language, your browser establishes a connection to Google's servers. Google uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
For more information about Google Translate and Google's privacy policy, please visit: https://www.google.com /policies /privacy /
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, deactivate this service in the "Cookie Consent Tool" on the website.
12.11 Google Customer Reviews (formerly Google Certified Merchant Programme)
We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google.
If you give your consent in accordance with Article 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be combined with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Reviews. The use of Google Customer Reviews may also involve the transfer of personal data to the servers of Google LLC in the USA.
You can withdraw your consent at any time by sending a message to the data controller or to Google.
13) Tools and other items
13.1 DATEV
For processing our accounting, we use the cloud-based accounting software service of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.
The provider processes incoming and outgoing invoices and, if necessary, also our company's bank transactions in order to automatically record invoices, assign them to the transactions, and create the financial accounting from this in a semi-automatic process.
Insofar as personal data is processed in this context, the processing is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes.
13.2 Lexoffice
For our accounting, we use the cloud-based accounting software service of the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes incoming and outgoing invoices and, if necessary, also our company's bank transactions in order to automatically record invoices, assign them to the transactions, and create the financial accounting from this in a semi-automatic process.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes.
13.3 Cookie consent tool
This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon accessing the site as an interactive interface, where consent for specific cookies and/or cookie-based applications can be given by checking the corresponding box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the corresponding box. This ensures that such cookies are only placed on the user's device if consent has been given.
This tool uses technically necessary cookies to save your cookie settings. No personal user data is processed.
Insofar as personal data (such as the IP address) is processed in individual cases for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for processing is Article 6(1)(c) GDPR. As the data controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective consent of the users.
We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
13.4 Google Maps
This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service will show you our location and make it easier for you to find us.
When you access pages that integrate the Google Maps map, information about your use of our website (e.g., your IP address) is transmitted to and stored on Google's servers; this information may also be transferred to servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged into, or whether a user account exists at all. If you are logged into Google, your data will be directly associated with your account. If you do not want your data to be linked to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.
The collection, storage, and analysis of your data is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR, based on Google's legitimate interest in displaying personalized advertising, conducting market research, and/or tailoring Google websites to user needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please use the objection option described above.
13.5 Wordfence
This website uses the "Wordfence" plugin for security reasons, a service provided by Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence"). The plugin protects the website and its associated IT infrastructure from unauthorized access, cyberattacks, viruses, and malware. Wordfence collects users' IP addresses and, if applicable, other data about their behavior on our website (in particular, URLs accessed and header information) to detect and prevent unauthorized access and threats. The collected IP address is compared against a list of known attackers. If the collected IP address is identified as a security risk, Wordfence can automatically block access to the site. The information collected in this way is transferred to and stored on a server of Defiant Inc. in the USA.
The data processing described above is carried out on the basis of Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in protecting the website from harmful cyberattacks and in maintaining structural and data protection integrity and security.
Defiant Inc. relies on the standard data protection clauses pursuant to Art. 46 sentence 2 lit. c GDPR as the legal basis for the transfer of data to the USA.
If website visitors have login rights, Wordfence also places cookies (small text files) on the visitor's device. These cookies allow certain location and device information to be read, enabling an assessment of whether the login-enabled access originates from an authorized person. Simultaneously, the cookies allow access rights to be evaluated and granted via an internal firewall according to the authorization level. Finally, the cookies serve to register irregular access attempts by site administrators from new devices or locations and to inform other administrators accordingly.
These cookies are only set if a user has login rights. Wordfence does not set cookies for website visitors without login rights.
If personal data is processed via cookies, the processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest in preventing unlawful access to the site administration and defending against unauthorized administrative access.
We have entered into a data processing agreement with Defiant Inc., which obliges the company to protect the data of website visitors and not to pass it on to third parties.
Further information on data usage by Defiant Inc. for Wordfence can be found in the Wordfence privacy policy at https://www.wordfence.com/privacy-policy /.
13.6 FiboSearch
This website uses the search technology service of the following provider: Damian Góra Web Development, Dr. Adama Bilika 2/28, 42-500 Bedzin, Poland.
To provide the search function for articles via the search field, as well as for navigation and filters, the provider collects and stores certain user information (such as the user or session ID) in anonymized form.
Insofar as personal data is processed in this context, the processing is based on Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in providing a fault-tolerant article search and thus in the optimal marketing of our offer.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) with regard to the processing of your personal data vis-à-vis the controller, whereby the respective conditions for exercising these rights are set out in the specified legal basis:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Article 18 GDPR;
- Right to information pursuant to Article 19 of the General Data Protection Regulation;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Article 77 of the General Data Protection Regulation.
14.2 RIGHT OF OBJECTION
If we process your personal data based on our overriding legitimate interest, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing is carried out for the purpose of establishing, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for this marketing purpose at any time. You can exercise this right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
15) Duration of storage of personal data
The duration of the storage of personal data depends on the respective legal basis, the purpose of the processing and - if relevant - additionally on the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question will be stored until you withdraw your consent.
If statutory retention periods exist for data processed within the framework of legal business or similar obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of the contract or the initiation of a contract and/or we have no legitimate interest in further storage.
When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.