Data protection

1) Introduction and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Salino GmbH, Taunusstraße 144, 41236 Mönchengladbach, Germany, Tel.: +49 211 15856577, E-mail: aero@salino.eu The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary so that we can display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference through which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there is concrete evidence of illegal use.

3) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), in other cases these cookies remain on your device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage period in the overview of the cookie settings in your web browser.

Insofar as personal data is also processed by individual cookies used by us, the processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR either to fulfill the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.

Please note that the functionality of our website may be limited if you do not accept cookies.

4) Contact us

4.1 Hubspot

We use the email ticketing system of the following provider to process customer inquiries: HubSpot Ireland Ltd, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

If you send contact requests by email via our website, these are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can view the current status of your request at any time using the individually assigned ticket number.

For the organization and processing of inquiries, personal data are collected depending on the scope of their provision, but in any case name, first name and email address, transmitted to the provider, stored there and read.

The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in answering your inquiry as quickly as possible and in optimizing our service offering in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

4.2 When you contact us (e.g. via contact form or e-mail), personal data will be processed exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and as long as there are no statutory retention periods to the contrary.

5) Data processing when opening a customer account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide us with this data when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.

Your customer account can be deleted at any time by sending a message to the responsible person's address given above. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary and we have no legitimate interest in further storage.

6) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you chose will be saved and published on this website. In addition, your IP address will be saved for security reasons in order to enable assignment to the author in the event of illegal comments. Your email address will be saved so that you can be contacted if a third party objects to your published content as being illegal.

The legal basis for storing your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as being unlawful.

7) Use of customer data for direct marketing

7.1 Subscribe to our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. Only your email address is required to send the newsletter. Providing further data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a confirmation link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address provided by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data that we collect when you register for the newsletter is used exclusively for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to the further use of your data or we reserve the right to use your data in any other way that is legally permissible and about which we will inform you in this declaration.

7.2 Advertising by post
Due to our legitimate interest in personalized direct advertising, we reserve the right to store and use your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) (f) GDPR in order to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time.

7.3 Notification of availability of goods by email

For items that are temporarily unavailable, you can sign up to be informed about product availability by email. In this case, we will send you a one-time email message about the availability of the item you have selected. Only your email address is required to send this notification. Providing additional data is voluntary and can be used to address you personally. We use the so-called double opt-in procedure to send emails, which ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a confirmation link to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address provided by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any misuse of your email address at a later date. The data we collect when you register for our email notification service about the availability of goods is used exclusively for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to the further use of your data or we reserve the right to use the data in any other legally permissible way, about which we will inform you in this declaration.

8) Data processing for order processing

8.1 Transmission of image files for order processing via upload function

On our website, we offer customers the opportunity to order the personalization of products by submitting image files via an upload function. The submitted image motif is used as a template for personalizing the selected product.

The customer can use the upload form on the website to send one or more image files from the memory of the end device used directly to us by automated, encrypted data transfer. We then record, save and use the transmitted files exclusively to produce the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be expressly informed of this in the following paragraphs. There will be no further transfer. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the aforementioned processing is carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b GDPR.

After the order has been finally processed, the transmitted image files will be automatically and completely deleted.

8.2 Transmission of image files for order processing by email

On our website we offer customers the opportunity to order the personalization of products by sending image files via email. The image motif sent is used as a template for personalizing the selected product.

The customer can send us one or more image files from the memory of the end device used via the email address provided on the website. We then collect, save and use the files transmitted in this way exclusively for the production of the personalized product, as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be expressly informed of this in the following paragraphs. There will be no further transfer. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b GDPR.

After the order has been finally processed, the transmitted image files will be automatically and completely deleted.

8.3 To the extent that it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact details you provided when ordering (name, address, email address) in order to inform you by suitable means of communication (e.g. by post or email) within the scope of our legal obligation to provide information in accordance with Art. 6 Paragraph 1 Letter c of GDPR. Your contact details will be used exclusively for the purpose of informing you about updates owed by us and will be processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work with the following service providers who support us in whole or in part in the implementation of the concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.4 Transmission of personal data to shipping service providers

8.5 German postal service

We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.6 DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.7 DHL Freight

We use the following provider as a transport service provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.8 FedEx

We use the following provider as transport service provider: FedEx Express Deutschland GmbH, Langer Kornweg 34 k,65451 Kelsterbach, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.9 TNT

We use the following provider as a transport service provider: TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.10 UPS

We use the following provider as our transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

We will transmit your email address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery notification is not possible.

The consent can be revoked at any time with future effect to the person responsible named above or to the provider.

8.11 Use of payment service providers (payment services)

- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the content of your order will be sent to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will only be passed on for the purpose of processing the payment with the provider and only to the extent that this is necessary for this purpose.

If you choose a payment method where the provider makes an advance payment (e.g. purchase on account or instalment or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, if applicable, information on an alternative means of payment).

In order to protect our legitimate interest in determining the solvency of our customers, we forward this data to the provider for the purpose of credit checks in accordance with Art. 6 Para. 1 lit. f GDPR. The provider uses the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment experience) to check whether the payment option you have chosen can be granted with regard to payment and/or default risks.

The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used to calculate the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transmission takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for the payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in the form of the statistical probability of a payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

If you choose the PayPal payment method "purchase on account", your payment data will first be sent to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in any case is Art. 6 Para. 1 lit. b GDPR. In this case, RatePay carries out an identity and credit check in its own name to determine your ability to pay in accordance with the principle already mentioned above and passes your payment data on to credit agencies on the basis of the legitimate interest in determining your ability to pay in accordance with Art. 6 Para. 1 lit. f GDPR. A list of credit agencies that Ratepay may use can be found here: https://www.ratepay.com /legal-payment-creditagencies /

When using the payment method of a local third-party provider, your payment data will first be sent to PayPal to prepare the payment in accordance with Art. 6 Para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the relevant provider to carry out the payment in accordance with Art. 6 Para. 1 lit. b GDPR:
- Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- website (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For more information on data protection, please see PayPal’s privacy policy: https://www.paypal.com /en /webapps /mpp /etc /privacy-full
- IMMEDIATELY

One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the content of your order will be sent to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will only be passed on to the provider for the purpose of processing the payment and only to the extent necessary for this purpose.
- Stripe

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) as well as information about the content of your order will be sent to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will only be passed on for the purpose of processing the payment with the provider and only to the extent that this is necessary for this purpose.

If you choose a payment method where the provider makes an advance payment (e.g. purchase on account or instalment or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, if applicable, information on an alternative means of payment).

In order to protect our legitimate interest in determining the solvency of our customers, we forward this data to the provider for the purpose of credit checks in accordance with Art. 6 Para. 1 lit. f GDPR. The provider uses the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment experience) to check whether the payment option you have chosen can be granted with regard to payment and/or default risks.

The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used to calculate the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

9) Online marketing

9.1 Facebook Pixel for creating custom audiences

Within our online offering we use the service “Facebook Pixel” of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).

When a user clicks on an ad we have placed on Facebook, a parameter is inserted into the URL of the page we have linked using the "Facebook pixel". This URL parameter is then entered into the user's browser after the forwarding process by a cookie that our linked page itself sets.

This enables Facebook to identify visitors to our online offering as a target group for placing advertisements (so-called "Facebook Ads"). Accordingly, we use the service to only display the Facebook advertisements we place to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences").

On the other hand, the Facebook pixel can be used to track whether users were redirected to our website after clicking on a Facebook ad and which actions they perform there (so-called conversion tracking).

The data collected is anonymous to us and does not allow any conclusions to be drawn about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies to read information about the end device used, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; in this context, it may also be transmitted to Meta Platforms Inc. servers in the USA.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

9.2 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information to help the website analyze how users use the site. The information generated by the cookie and/or web beacon (including your IP address) about your use of the website is typically transferred to a Google server and stored there. The information may also be transferred to Google LLC servers in the USA.
Google uses the information obtained in this way to evaluate your usage behavior in relation to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or these third parties process the information on Google's behalf.
All processing described above, in particular the reading of information about the device used by means of cookies and/or web beacons, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can view Google’s privacy policy here: https://www.google.com /policies /privacy /

9.3 HubSpot

This website uses the software-based marketing service of the following provider for the provision and synchronization of various customer management services: HubSpot Ireland Ltd, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

The service enables the automated processing of feed activities, the control of advertising in the marketing channels used and the analysis of the success of marketing measures as well as central email marketing and contact management.

Cookies are used to fulfil the various functions. These are small text files that are stored locally in the cache of your web browser on your device and enable us to analyse your use of the website. The cookies record certain information, such as the IP address, location and time of the page access.

All processing described above, in particular the setting of cookies to read information about the end device used, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

Other legal bases for data processing that apply within the framework of certain service functions (e.g. the requirement of express consent pursuant to Art. 6 Para. 1 lit. a GDPR when sending newsletters) remain unaffected.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

10) Web analytics services

10.1 Google Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

Google (Universal) Analytics is used on this website exclusively without the use of cookies, i.e. the service never places cookies on your device.

Instead, an individual ID assigned by Google (Universal) Analytics is stored in the local memory of your browser, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits in order to exclude any direct personal reference.

The information is transferred to Google servers and processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, including the storage of information on the end device used in the form of the ID card, will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You can revoke your consent at any time with effect for the future.

To exercise your right of withdrawal, you can download and install the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plug-in or within browsers on mobile devices, you can withdraw your consent by clicking on the following link to set an opt-out cookie that prevents Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again):
Disable Google Analytics

We have concluded a data processing agreement with Google that guarantees the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

For the transfer of data to the USA, Google refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

Further legal information regarding Google (Universal) Analytics, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com /privacy ?hl=en &gl=de and under https://policies.google.com /technologies /partner-sites

Demographic characteristics
Google (Universal) Analytics uses the special "Demographic Features" function and can thus create statistics that make statements about the age, gender and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com /ads /answer /2662922 ?hl=en For more information about Google Signals, please visit this link: https://support.google.com/analytics/answer/7532985?hl=en

User IDs
As an extension of Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website and log in with this account on various devices, your activities, including conversions, can be analyzed across devices.

10.2 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, Google Analytics 4 does not use cookies when you visit the website, unless you explicitly agree to cookies. Instead, information about your usage behavior is collected and processed through so-called pings (small data packets sent to the host of a terminal device). This information also includes your IP address, which is, however, shortened by Google by the last digits to exclude any direct personal reference.

The information is transferred to Google's servers and processed there. It is also possible that the information will be transferred to Google LLC, based in the USA.
Google will use the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

All processing described above, including the transmission of data through "pings" and the possible setting of Google Analytics cookies, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that guarantees the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, Google refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
Further legal information regarding Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com /privacy ?hl=en &gl=de and under https://policies.google.com /technologies /partner-sites

Demographic characteristics
Google Analytics 4 uses the special "Demographic Features" function and can thus create statistics that make statements about the age, gender and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com /ads /answer /2662922 ?hl=en For more information about Google Signals, please visit this link: https://support.google.com/analytics/answer/7532985?hl=en

User IDs
As an extension of Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 Paragraph 1 Letter a of GDPR, have set up an account on this website and log in with this account on various devices, your activities, including conversions, can be analyzed across devices.

10.3 Google Tag Manager

This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling and applying conditions via a uniform user interface. The Google Tag Manager itself does not store or read information on user devices. The service also does not carry out any independent data analyses. However, when you visit a page, the Google Tag Manager transmits your IP address to Google and can store it there. Transmission to Google LLC servers in the USA is also possible. This is possible in the USA.

This processing only takes place if you have given us your express consent in accordance with Art. 6 (1) a GDPR. Without this consent, the Google Tag Manager will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

11) Retargeting/Remarketing and Conversion Tracking

– Google AdWords Conversion Tracking
This website uses the online advertising program “Google Ads” and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All of the processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
– Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform from the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address. The use of GMP may also result in the transmission of personal data to the servers of Google LLC. USA.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/

12) Functionalities of the site

12.1 Facebook plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with the content of the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the site via a so-called "2-click" or "Shariff" solution.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established to the provider's servers.

Only when you activate the plug-ins and thereby consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. Irrespective of a login to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile in the provider's social network, information about the interactions carried out via the plug-ins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transmitted to the provider.

The data may also be transmitted to: Meta Platforms Inc, USA

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.2 Instagram plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interactions with the content of the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the site via a so-called "2-click" or "Shariff" solution.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established to the provider's servers.

Only when you activate the plug-ins and thereby consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. Irrespective of a login to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile in the provider's social network, information about the interactions carried out via the plug-ins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transmitted to the provider.

Data may also be transferred: Meta Platforms Inc. (USA)

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.3 LinkedIn plugins

Our website uses plugins from the social network of the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

These plugins enable direct interactions with the content of the social network.

In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the site via a so-called "2-click" or "Shariff" solution.

This integration ensures that when you access a page on our website that contains such plugins, no connection is established to the provider's servers.

Only when you activate the plug-ins and thereby consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. Irrespective of a login to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile in the provider's social network, information about the interactions carried out via the plug-ins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transmitted to the provider.

The data may also be transmitted to: LinkedIn Inc. in the USA

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.4 Youtube

This website uses plug-ins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The data may also be transmitted to: Google LLC. in the USA

If you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want this to be assigned to your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies to read information about the device used, will only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.5 Video

This website uses plugins for displaying and playing videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

If you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want this to be assigned to your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies to read information about the device used, will only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.6 Online applications via a form

We have a separate section on our website where we advertise current vacancies for which interested parties can apply using a corresponding form.

Applicants must provide all personal data necessary for an informed assessment, including general information such as name, address and contact details, as well as performance-related evidence and health-related information where appropriate. Details of the application process can be found in the job advertisement.

When the form is submitted, the applicant data is transmitted to us in encrypted form using state-of-the-art technology, stored by us and evaluated solely for the purpose of processing the application. The processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR (or Section 26 Para. 1 BDSG), in accordance with which completing the application process is considered to be the initiation of an employment contract.

If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability) are requested from applicants as part of the application process, the processing is carried out on the basis of Art. 9 (2) lit. b. GDPR. GDPR so that we can exercise the rights arising from labor, social security and social protection law and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of health or social systems and services.

If the applicant is not selected or if an applicant withdraws his application prematurely, the data submitted in the form and all electronic correspondence, including the application email, will be deleted no later than 6 months after notification. This period is based on our legitimate interest in answering any queries regarding the application and, if necessary, in being able to meet our obligation to provide evidence in accordance with the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Para. 1 lit. b GDPR (if processed in Germany in conjunction with Section 26 Para. 1 BDSG) for the purpose of carrying out the employment relationship.

12.7 Applications for job advertisements by email

Current vacancies are advertised in a separate section on our website, and interested parties can apply by sending an email to the contact address provided.

Applicants must provide all personal information necessary for an informed assessment, including general information such as name, address and contact details, as well as performance-related evidence and health-related information where appropriate. Details of the application process can be found in the job advertisement.

After receiving the application by email, the data will be saved and evaluated solely for the purpose of processing the application. If we have any queries, we will use either the applicant's email address or telephone number. The processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR (or Section 26 Para. 1 BDSG), in accordance with which completing the application process is to be regarded as the initiation of an employment relationship.

If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability) are requested from applicants as part of the application process, the processing is carried out on the basis of Art. 9 (2) lit. b. GDPR. GDPR so that we can exercise the rights arising from labor, social security and social protection law and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of health or social systems and services.

If the applicant is not selected or if an applicant withdraws his application prematurely, the data he has submitted and all electronic correspondence, including the application email, will be deleted no later than 6 months after notification. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligation to provide evidence in accordance with the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Para. 1 lit. b GDPR (if processed in Germany in conjunction with Section 26 Para. 1 BDSG) for the purpose of carrying out the employment relationship.

12.8 - Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its browser cache for the correct display of texts and fonts and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

The data may also be transmitted to the following locations: Google LLC, USA

The processing of personal data in the context of establishing a connection with the font provider only takes place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.9 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The data can also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses "Google Fonts", i.e. fonts that are loaded from the Internet by Google. In this case, no information other than the information mentioned above, which is already transmitted to Google via the ReCaptcha functionality, is processed.

The service checks whether an input has been made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is carried out by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit and transmits this to the provider's servers for evaluation.

The legal basis is our legitimate interest in establishing ownership of rights on the Internet and preventing misuse and spam in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When transferring data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

12.10 Google Translate

This website uses the translation service "Google Translate" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. In order for the translation to be displayed automatically after you have selected a national language, the browser you use establishes a connection to Google's servers. Google uses so-called cookies, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the United States and stored there.

For more information about Google Translate and Google’s privacy policy, please visit: https://www.google.com /policies /privacy /

You can revoke your consent at any time with effect for the future. To exercise your right of revocation, deactivate this service in the "Cookie Consent Tool" on the website.

12.11 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google.

If you give your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The rating you submit will then be merged with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. In addition, your rating will be used for Google Seller Reviews. The use of Google Customer Reviews may also involve the transmission of personal data to Google LLC's servers in the USA.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

13) Tools and other

13.1 DATEV

To handle our accounting, we use the cloud-based accounting software service of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.

The provider processes incoming and outgoing invoices and, if applicable, our company's bank transactions in order to automatically record invoices, assign them to transactions and use them to create financial accounting in a semi-automatic process.

To the extent that personal data is also processed in this context, the processing is carried out on the basis of Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

13.2 Lexoffice

For accounting purposes, we use the cloud-based accounting software service of the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany

The provider processes incoming and outgoing invoices and, if applicable, our company's bank transactions in order to automatically record invoices, assign them to transactions and use them to create financial accounting in a semi-automatic process.

If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

13.3 Cookie consent tool

This website uses a so-called "cookie consent tool" to obtain effective consent from users for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they access the page in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by checking the corresponding box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by checking the corresponding box. This ensures that such cookies are only set on the user's respective device if consent has been given.

The tool uses technically necessary cookies to save your cookie settings. Personal user data is not processed.

If personal data (such as the IP address) is processed in individual cases for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6 Para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective consent of the user.

We have concluded a data processing contract with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.4 Google Maps

This website uses an online map service provided by the following provider: Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive maps to visually represent geographic information. If you use this service, our location will be displayed and you will be able to find us more easily.

When you access the subpages in which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google's servers and saved there; this information may also be transferred to Google LLC servers in the USA. This happens regardless of whether Google provides a user account through which you are logged in, or whether a user account already exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your data to be linked to your Google profile, you must log out before activating the button. Google saves your data (including for users who are not logged in) as usage profiles and evaluates them.

The data is collected, stored and evaluated in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.

To the extent required by law, we have your consent for the processing of your data as described above in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please use the objection option described above.

13.5 Wordfence
For security reasons, this website uses the "Wordfence" plug-in, a service provided by Defiant Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence"). The plug-in protects the website and the associated IT infrastructure from access by unauthorized third parties, from cyber attacks, and from viruses and malware. Wordfence collects users' IP addresses and, if applicable, other data about their behavior on our website (in particular, URLs accessed and header information) in order to detect and prevent unauthorized page access and dangers. The recorded IP address is compared with a list of known attackers. If the recorded IP address is identified as a security risk, Wordfence can automatically block access to the site. The information collected in this way is transferred to a Defiant Inc. server in the USA and stored there.
The data processing described above is carried out on the basis of Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interests in protecting the website against harmful cyber attacks and in maintaining structural and data protection integrity and security.
Defiant Inc. relies on the standard data protection clauses according to Art. 46 sentence 2 lit. c GDPR as the legal basis for the transfer of data to the USA.
If website visitors have login rights, Wordfence also places cookies (= small text files) on the visitor's respective device. Cookies can be used to read certain location and device information, which makes it possible to assess whether the login-authorized access comes from a legitimate person. At the same time, the cookies can be used to evaluate the access rights and to release them via an internal firewall according to the authorization level. Finally, the cookies are used to register irregular access by site administrators from new devices or new locations and to inform other administrators about them.
These cookies are only set if a user has login rights. Wordfence does not set cookies for website visitors without login rights.
If personal data is processed via cookies, the processing is carried out in accordance with Art. 6 Para. 1 lit. f. GDPR on the basis of our legitimate interest in preventing unlawful access to the site administration and warding off unauthorized administration access.
We have entered into a data processing agreement with Defiant Inc., which obliges the company to protect the data of site visitors and not to pass it on to third parties.
For more information about Defiant Inc.’s use of data for Wordfence, please see Wordfence’s privacy policy at https://www.wordfence.com/privacy-policy /.

13.6 FiboSearch

This website uses the search technology service of the following provider: Damian Góra Web Development, Dr. Adama Bilika 2/28, 42-500 Bedzin, Poland.

To provide the search function for articles via the search field as well as for navigation and filters, the provider collects and stores certain user information (such as the user or session ID) in an anonymized form.

Insofar as personal data is also processed in this context, the processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in providing an error-tolerant article search and thus in the optimal marketing of our offer.

14) Rights of the data subject

14.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the specified legal basis for the respective conditions for exercising them:

• Right to information according to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing according to Art. 18 GDPR;
• Right to information pursuant to Article 19 of the General Data Protection Regulation;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 (3) GDPR;
• Right to lodge a complaint under Article 77 of the General Data Protection Regulation.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS CARRIED OUT FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES AT ANY TIME. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration for which personal data is stored depends on the respective legal basis, the purpose of the processing and - if relevant - also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, the data in question will be stored until you revoke your consent.

If there are statutory retention periods based on Art. 6 (1) (b) GDPR for data that is processed as part of legal business or similar obligations, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required for the performance or initiation of the contract and/or there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you EXERCISE your right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.