Data protection
Privacy Policy
We are delighted that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used. Personal data means any information relating to the personal or material circumstances of an identified or identifiable natural person (data subject), e.g. name, address, email addresses and user behaviour. In other words, this is data that enables us to identify you. In addition, you will occasionally find information here about data processing activities outside this website (e.g. video conferences or newsletters).
§ 1 Controller responsible for data processing#
Controller
Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
motoin GmbH
Rotter Bruch 26a 52068 Aachen
Telephone: 0241 4125990
Email:
Data Protection Officer
exkulpa gmbh
Waldfeuchterstr. 266
52525 Heinsberg
Telephone: 02452 / 99 33 11
Email:
§ 2 General Information#
In addition to the data that you actively provide to us on this site (e.g. via our contact form), we collect certain technical data. This so-called metadata is transmitted automatically from your computer to our servers as soon as you visit our website (including browser, operating system and timestamp). We use such data to ensure that our website is displayed correctly. In addition, we may collect data via integrated third-party providers (e.g. for external media such as map services, or analytics tools). We explain the individual purposes and legal bases in the course of this privacy policy.
Retention period
Unless a separate retention period is specified in this privacy policy, we will retain your personal data for as long as the purpose of the data processing continues to apply. If you submit a legitimate request for erasure or withdraw your consent, we will delete your data. Statutory retention obligations remain unaffected.
Legal bases for data processing
If you have consented to the data processing, your personal data is processed on the basis of Art. 6(1)(a) GDPR or, where special categories of data under Art. 9(1) GDPR are processed, Art. 9(2)(a) GDPR. Where you have given explicit consent to the transfer of personal data to third countries, the data is also processed pursuant to Art. 49(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information on your end device (e.g. through device fingerprinting), the data processing additionally takes place on the basis of s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time. Where your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data pursuant to Art. 6(1)(b) GDPR. Furthermore, where this is necessary for compliance with a legal obligation, we process your data on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. In the following sections of this privacy policy, you will be informed of the relevant legal bases in individual cases.
Notice on data transfers to third countries and to US companies without DPF certification
Please note that we use tools provided by companies that are established in third countries without adequate data protection or in the USA and that are not covered by the EU-US Data Privacy Framework (DPF). When these tools are used, your personal data may be transferred to and processed in those countries. Please note that in these third countries without adequate data protection, a level of data protection comparable to that of the EU cannot be guaranteed.
We would like to clarify that the USA generally offers a level of data protection comparable to that of the EU. The transfer of data to the USA is permitted if the recipient is DPF-certified or provides appropriate additional safeguards. Information on data transfers to third countries, including the data recipients, can be found in our privacy policy.
Automated decision-making
Your personal data is not processed for the purpose of automated decision-making.
Your rights
As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:
- • Right of access: You have the right to request confirmation from us as to whether your personal data is being processed and, if so, to obtain further information about the processing and copies of the data being processed (Art. 15 GDPR).
- • Right to rectification: You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
- • Right to erasure: You have the right to request the immediate erasure of personal data concerning you where the statutory requirements are met, in particular where the data is no longer necessary for the purposes pursued and the processing is unlawful (Art. 17 GDPR).
- • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data where the statutory requirements are met, in particular where you contest the accuracy of the data, the processing is unlawful and you oppose erasure (Art. 18 GDPR).
- • Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, where technically feasible (Art. 20 GDPR).
- • Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where the processing is based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
- • Right to withdraw consent: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR).
§ 3 Further data processing activities#
General information obligations
This information is intended for customers, prospective customers, suppliers and employees. We process your personal data for the following purposes:
- • To perform the contractual obligations we owe to you (Art. 6(1)(b) GDPR).
- • To carry out pre-contractual measures (Art. 6(1)(b) GDPR).
- • To respond to enquiries (Art. 6(1)(b) GDPR).
- • Where you have given us consent to process your personal data for specific purposes (for example, to receive our newsletter), the data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR).
- • To comply with legal obligations to which our company is subject (Art. 6(1)(c) GDPR).
- • Where necessary, we also process your data to safeguard our legitimate interests, in particular to establish, exercise or defend legal claims in legal disputes, to ensure IT security, to consult and exchange data with credit reference agencies in order to assess creditworthiness and default risks, for direct marketing and market research (unless you have objected to the use of your data for this purpose), for measures relating to business management and the further development of services and products, for measures to optimise products and sales, for risk management measures, and for the prevention or investigation of criminal offences (Art. 6(1)(f) GDPR).
Categories of recipients of personal data
Within our company, only those employees who strictly need access to the data to perform their duties have access to it (need-to-know principle). Certain processes and services are carried out by carefully selected service providers, engaged in compliance with data protection law, which are established within the EEA. Where service providers engaged by us receive access to personal data in the course of providing their services, data processing agreements have been concluded with them pursuant to Art. 28(3) GDPR.
Retention period
The data we process is stored for the duration of the contractual relationship and its performance, and in compliance with statutory retention periods. These include, in particular, retention obligations under commercial and tax law pursuant to the German Commercial Code (HGB) and the German Fiscal Code (AO). The standard retention and documentation periods under these provisions are up to ten years. If no contractual relationship is entered into, we process the data only for as long as the specific purpose requires.
§ 4 Cookies#
Cookies are small text files that are stored by your browser on your device in order to retain certain information during your use of the website. Cookies enable us to improve various aspects of our website and to make your visit more convenient.
There are different types of cookies, which serve different purposes. Temporary cookies, also known as session cookies, are stored only for the duration of your use of the website and are deleted automatically when you close your browser. Persistent cookies, by contrast, remain stored on your device for a longer period and enable us to recognise you and your preferences when you visit the website again.
Cookies can also be divided into first-party cookies and third-party cookies. First-party cookies are set by our website, whereas third-party cookies are set by other websites or service providers whose content is embedded in our website, such as plugins or analytics tools.
Cookies are used for various purposes, for example to ensure that the website functions properly, to store user settings, to compile anonymous statistics on user behaviour, or to display personalised content and advertising. The legal basis for the use of cookies varies depending on the purpose of the cookies. In some cases, cookies are set on the basis of our legitimate interests under Art. 6(1)(f) GDPR, in order to make our website functional and user-friendly. As the website operator, we have a legitimate interest in storing necessary cookies so that our services are provided in a technically error-free and optimised manner. Where we obtain your consent to the use of cookies, the processing is based on Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time.
§ 5 Data processing in detail#
Below, we provide information on the individual processing operations, the scope and purpose of the data processing, the legal basis, any obligation to provide your data, and the relevant retention period. No automated individual decision-making, including profiling, takes place.
§ 6 Provision of the website#
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which access is made (referrer URL)
- Browser used and, where applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider which processes the aforementioned data on our behalf, under a data processing agreement pursuant to Art. 28 GDPR, for the purpose of making the website available.
The hosting provider is engaged for the purpose of performing our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring that our online offering is provided securely, quickly and efficiently by a professional provider (Art. 6(1)(f) GDPR).
We use the following hosting provider:
domain factory GmbH
Oskar-Messter-Str. 33
85737 Ismaning
§ 7 Contact form#
Nature and scope of processing
If you send us enquiries (e.g. via the contact form, email or telephone), we will store all data arising from them (e.g. name, email address, subject of the enquiry, etc.). We need this data in order to process your enquiry and to answer any follow-up questions. We will not share this data without your consent.
Purpose and legal basis
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where you have given it beforehand.
Retention period
The data you enter in the contact form will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
Communication via WhatsApp Business
To communicate with our customers and other third parties, we use, among other tools, the instant messaging service WhatsApp Business, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you communicate with us via WhatsApp, the chats are end-to-end encrypted. This is intended to prevent WhatsApp or third parties from gaining access to the content of the chats. However, WhatsApp does gain access to metadata generated in the course of the communication process (e.g. sender, recipient and time). WhatsApp shares the personal data it collects with its parent company Meta, which is based in the USA. Further details on data processing can be found in WhatsApp"s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.
WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners (Art. 6(1)(f) GDPR). If you have previously given consent to data processing, your data will be processed solely on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
The communication content exchanged between us on WhatsApp will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA which aims to ensure compliance with European data protection standards when processing data in the USA. Certification under the DPF obliges companies to comply with these data protection standards.
We have configured our WhatsApp accounts so that no automatic synchronisation of data with the address book on the smartphones in use takes place.
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.
§ 8 Contact form for applicants#
Nature and scope of processing
We collect and process the personal data of applicants. Such data processing may also take place by electronic means, for example where applicants send us their application documents by email or via a web form on our website. On our website, we offer you the option of submitting applications for advertised vacancies to us by email.
Purpose and legal basis
We process applicants" personal data in accordance with statutory requirements for the purpose of initiating an employment relationship (Art. 6(1)(b) GDPR). You are not obliged to provide us with this data. However, without this data we cannot conduct an application process with you.
If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of performing the employment relationship, on the basis of Art. 6(1)(b) GDPR and, where you provide us with special categories of personal data such as health information, on the basis of Art. 9(2)(b) GDPR.
For the purpose of approaching potential applicants, we also use the services of the professional networks LinkedIn and XING. In this respect, the network operators act as Processors on our behalf and in accordance with our instructions. The legal basis for the data processing when approaching potential applicants on our behalf is Art. 6(1)(f) GDPR (our legitimate interests). If you send us your application following such an approach, we will process your data for the purpose of initiating an employment relationship, as described above, on the basis of Art. 6(1)(b) GDPR.
Retention period
If your application is unsuccessful, your data will be stored for a period of 6 months after the conclusion of the application process. This is done to safeguard our legitimate interests, in order to assess whether we need the data to defend against any claims in connection with the application process. After that, we are obliged to delete or anonymise your data. In that case, the data will only remain available to us as so-called metadata, without any direct link to an individual, for statistical analysis (for example, the proportion of female or male applicants, the number of applications per period, etc.).
Where it is apparent that further storage of the data beyond the 6-month period is necessary to safeguard our legitimate interests (e.g. due to impending or pending legal proceedings), deletion will only take place once the purpose for the continued retention no longer applies. The legal basis for this further storage is our legitimate interest in establishing, exercising or defending civil-law claims (Art. 6(1)(f) GDPR in conjunction with s. 24(1) no. 2 BDSG or, where special categories of personal data are stored, Art. 9(2)(f) GDPR in conjunction with s. 24(2) BDSG).
Inclusion in the applicant pool
As part of the application process, we offer applicants the opportunity to be included in our “talent pool” for a period of 24 months on the basis of consent pursuant to Art. 6(1)(a) and Art. 9(2)(a) GDPR. If you have provided special categories of personal data in your application, such as health information, your consent also extends to this data. You are not obliged to provide us with your application data for our talent pool. However, without this data we cannot consider you for positions advertised in the future, unless you submit a new application.
Consent to the inclusion of application data in the talent pool is voluntary and may be withdrawn at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Your application documents in the talent pool will be deleted at the latest upon expiry of the retention period or, in the event of withdrawal or acceptance of a job offer, by one of the companies responsible for the talent pool.
If, in the course of the application process, you receive an offer of employment from us and accept it, we or the relevant company will store the personal data collected during the application process for the purpose of performing the employment relationship. The legal basis for this data processing is Art. 6(1)(b) GDPR or, where you provide us with special categories of personal data such as health information, Art. 9(2)(b) GDPR.
§ 9 Newsletter#
We offer you our newsletter on this website. If you wish to subscribe, we require your email address and further information confirming that it is your email address and that you consent to receiving the newsletter. No other personal data is collected, unless you provide it voluntarily (e.g. name, telephone number, place of residence, etc.).
When processing the data you provide when signing up to the newsletter, we rely exclusively on your consent under Art. 6(1)(a) GDPR as the legal basis. You may withdraw your consent to the processing and storage of your personal data at any time with effect for the future (e.g. via the "unsubscribe" link in the newsletter).
We will store the personal data you have provided for the purpose of receiving the newsletter until you unsubscribe from the newsletter with us or with the email delivery service provider. This does not apply to data that we have stored for other purposes.
If you unsubscribe from the newsletter distribution list, your email address will be stored indefinitely by us or the email delivery service provider on a blacklist. This is done to prevent future mailings to you. The data on the blacklist will be used exclusively for this purpose and will not be merged with other data. This is not only in your interest, but also in our legitimate interest under Art. 6(1)(f) GDPR, in order to comply with our legal obligations when sending newsletters. You may object to this storage if your personal interests override our legitimate interest.
Emarsys
This website uses Emarsys to send newsletters. The provider is Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin, Germany.
Emarsys is a service that organises and analyses the sending of newsletters. Data you enter for the purpose of receiving newsletters (e.g. your email address) is stored on Emarsys"s servers.
Data analysis by Emarsys
Emarsys makes it possible to view the performance of our newsletter. We can determine whether a newsletter has been opened and which links have been clicked. This allows us to use Emarsys to analyse and evaluate our newsletter campaigns.
Emarsys also makes it possible to better tailor newsletters to our target groups by dividing newsletter recipients into different categories (tagging). If you object to analysis by Emarsys, you can unsubscribe from the newsletter via a link. This link is available to you in every newsletter you receive.
You can find more information about Emarsys here: https://emarsys.com/de/.
Legal basis
The data is processed on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. The lawfulness of the data processing operations already carried out remains unaffected.
Emarsys"s privacy policy can be found here: https://emarsys.com/de/privacy-policy/.
Retention period
Data you provide to us for the purpose of sending the newsletter is stored by us or the newsletter service provider. This applies until you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected.
If you unsubscribe from our newsletter, we may store your email address on a blacklist. In this way, we ensure that we do not send newsletters to persons who have unsubscribed. The data on the blacklist is used solely for this purpose and is not merged with other data. This serves your interest and ours (Art. 6(1)(f) GDPR) in complying with the legal requirements when sending newsletters. The storage of your data on the blacklist is not limited in time. You have the right to object to the storage of the data if your interest overrides our legitimate interest.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.
§ 10 Registration of a customer account#
Processing of customer and contract data
We collect, process and use your personal data only to the extent necessary for the establishment, amendment or performance of a legal relationship. This is done for the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
The customer data collected will be deleted once the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
Transfer of data upon conclusion of a contract for online shops, retailers and dispatch of goods
We only transfer personal data where this is necessary for the performance of the contract, for example to shipping service providers or to the credit institution commissioned with processing the payment. No further transfer of data takes place, or only where you have expressly consented to the transfer.
The legal basis for the data processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
Transfer of data upon conclusion of a contract for services and digital content
We only transfer personal data where this is necessary for the performance of the contract, for example to the credit institution commissioned with processing the payment. No further transfer of data takes place, or only where you have expressly consented to the transfer.
The legal basis for the data processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
Order fulfilment via dropshipping
If you order products from us, your order may be dispatched to you directly by the retailer (dropshipping). For this purpose, we pass on your recipient details (name, delivery address and, where applicable, telephone number) to the dispatching company for the purpose of delivering the goods.
The legal basis for the data processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR and our legitimate interest in the fastest and most effective possible processing of the purchase within the meaning of Art. 6(1)(f) GDPR.
Credit checks
In the case of a purchase on invoice or another payment method under which we provide advance performance, we or our payment service provider may carry out a credit check (scoring). For this purpose, we transmit the data you have entered (e.g. name, address, age or bank details) to a credit reference agency. On the basis of this data, the likelihood of payment default is calculated. Where the risk of payment default is excessive, we may refuse the payment method concerned.
The legal basis for the data processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR, as well as the avoidance of payment defaults (legitimate interest under Art. 6(1)(f) GDPR). If you have previously given consent to the data processing, your data will be processed solely on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
Payment services
We integrate third-party payment services into our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) are processed by the payment service provider for the purpose of payment processing; the respective contractual and data protection provisions of the respective providers apply. The legal basis for the data processing is the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR, as well as the interest in a payment process that is as smooth, convenient and secure as possible (Art. 6(1)(f) GDPR). If you have previously given consent to the data processing, your data will be processed solely on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
We use the following payment service providers:
PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
The transfer of data to the USA is based on the EU Commission"s Standard Contractual Clauses. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
For details, please refer to PayPal"s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
giropay
The provider of this payment service is paydirekt GmbH, Stephanstraße 14 – 16, 60313 Frankfurt am Main, Germany (hereinafter "giropay").
For details, please refer to giropay"s privacy policy: https://www.paydirekt.de/agb/index.html.
American Express
The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter "American Express").
American Express may transfer data to its parent company in the USA. The transfer of data to the USA is based on Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-iec/company/legal/privacy-centre/binding-corporate-rules/
For further information, please refer to American Express"s privacy policy: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.
Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter "Mastercard").
Mastercard may transfer data to its parent company in the USA. The transfer of data to the USA is based on Mastercard"s Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.
VISA
The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter "VISA").
The United Kingdom is regarded as a third country that is safe from a data protection perspective. This means that the United Kingdom has a level of data protection equivalent to that in the European Union.
VISA may transfer data to its parent company in the USA. The transfer of data to the USA is based on the EU Commission"s Standard Contractual Clauses. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.
For further information, please refer to VISA"s privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
iDEAL
The provider of this payment service is Currence B.V., Gustav Mahlerplein 33-35, Amsterdam, Noord-Holland 1082 MS, Netherlands. Details on how your data is handled can be found in iDEAL"s privacy policy at https://www.ideal.nl/disclaimer-privacy/.
Diners Club
The provider of this payment service is Diners Club Bank AG, Lassallestraße, 31020 Vienna, Austria. Details on how your data is handled can be found in Bancontact"s privacy policy at https://www.dinersclub.de/datenschutz.
EPS
The provider of this payment service is PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria. Details on how your data is handled can be found in PSA"s privacy policy at https://eservice.psa.at/de/datenschutzerklaerung.html.
Voucher offers from Sovendus GmbH
To select a voucher offer that is currently of interest to you, we transmit the hash value of your email address, in pseudonymised and encrypted form, and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6(1)(f) GDPR). The pseudonymised hash value of the email address is used to take into account any objection to advertising from Sovendus that may exist (Art. 21(3), Art. 6(1)(c) GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days (Art. 6(1)(f) GDPR). In addition, for invoicing purposes, we transmit the order number, order value with currency, session ID, coupon code and timestamp to Sovendus in pseudonymised form (Art. 6(1)(f) GDPR). If you are interested in a voucher offer from Sovendus, there is no objection to advertising linked to your email address, and you click on the voucher banner that is displayed only in that case, we will transmit your title, name, postcode, country and email address to Sovendus in encrypted form in order to prepare the voucher (Art. 6(1)(b) and (f) GDPR).
For further information on the processing of your data by Sovendus, please refer to the online privacy notice at www.sovendus.de/datenschutz.
Amazon Pay
Nature and scope of processing
We have integrated Amazon Pay components into our website. Amazon Pay is a service of Amazon.com, Inc. and offers online payment solutions worldwide.
If you select Amazon Pay as your payment method, the data required for the payment process will be automatically transmitted to Amazon.com, Inc.
In this context, the following data are generally collected: name, address, company (where applicable), email address, telephone and mobile number, and IP address.
Purpose and legal basis
The service is used on the basis of the performance of a contract, i.e. to process payment transactions pursuant to Art. 6(1)(b) GDPR.
Retention period
The specific retention period of the processed data cannot be influenced by us but is determined by Amazon.com, Inc. Further information can be found in the privacy policy for Amazon Pay: https://pay.amazon.de/help/201751600.
Payment processing via PayPal
We process payments via Apple Pay and Google Pay through PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). In this context, the data required for payment (e.g. name, invoice amount, order and transaction data) are transmitted to PayPal.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, where statutory obligations such as the prevention of money laundering are concerned, Art. 6(1)(c) GDPR.
PayPal may transfer data to its parent company (PayPal Inc.) in the USA. The transfer of data to the USA is based on Binding Corporate Rules pursuant to Art. 47 GDPR, which you can access here: https://www.paypal.com/de/legalhub/paypal/bcr
Apple Pay
The provider of this payment service is Apple Distribution International Ltd., 40 Fortwilliam Crescent, Belfast, Northern Ireland, BT15 3RD (hereinafter "Apple"). Payment processing is carried out via our payment service provider PayPal.
Apple may transfer data to its parent company (Apple Inc.) in the USA. The transfer of data to the USA is based on the EU Commission"s Standard Contractual Clauses.
For details and further information, please refer to Apple"s privacy policy: https://www.apple.com/legal/privacy/data/de/apple-pay/.
Google Pay
The provider of this payment service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). Payment processing is carried out via our payment service provider PayPal.
Google may transfer data to its parent company (Google LLC) in the USA. The transfer of data to the USA is based on the EU Commission"s Standard Contractual Clauses and the EU-US Data Privacy Framework.
For details and further information, please refer to the privacy notice for Google Payments: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de and to Google"s privacy policy: https://policies.google.com/privacy.
§ 11 Comment function#
If you post a comment on this website, the comment, the time at which it was submitted, your email address and, where applicable, your username will be stored.
Storage of users" IP addresses
When comments are posted on this website, we store the IP addresses of users. We need this data so that we can take action against users if the author of a comment breaches the law through insults or propaganda, as we do not review comments before they are published on this website.
Retention period of comments
The comments published on this website and the data associated with them (time of submission, email address and username) are stored until the content on which the comments were made is deleted. In addition, comments may be deleted at any time if they contain offensive content.
Legal basis for storing comments
The consent you have given pursuant to Art. 6(1)(a) GDPR serves as the legal basis for storing comments on this website. You may withdraw your consent at any time by sending us an informal email. The lawfulness of the data processing operations already carried out is not affected by the withdrawal.
§ 12 Presences on social media platforms#
On our website, we maintain public profiles on various social networks. You can find more detailed information about the social networks we use in the relevant sections of our privacy policy.
Social networks such as Facebook, Twitter and others can analyse your user behaviour comprehensively when you visit their websites or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations that are relevant to data protection:
If you are logged in to your social media account and visit our social media presence, the operator of the social media platform can assign this visit to your user account. However, your personal data may also be collected in certain circumstances if you are not logged in or do not have an account with the relevant social media platform. In this case, the data is collected, for example, by means of cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media platforms can create user profiles that store your preferences and interests. As a result, interest-based advertising can be displayed to you both within and outside the relevant social media presence. If you have an account with the relevant social network, interest-based advertising can be displayed on all devices on which you are or have been logged in.
Please note that we cannot trace all processing operations on the social media platforms. Depending on the provider, the operators of the social media platforms may therefore carry out further processing operations. For details, please refer to the terms of use and privacy policies of the relevant social media platforms.
Legal basis for data processing
Our social media presences serve to ensure the widest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).
Controller and exercise of rights
When you visit our social media presences (e.g. Facebook), we are jointly responsible, together with the operator of the social media platform, for the data processing operations triggered by that visit. In principle, you can exercise your rights (access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against us and against the operator of the relevant social media platform (e.g. against Facebook).
Despite our joint responsibility with the operators of the social media platforms, we do not have full influence over the platforms" data processing operations. Our options are largely determined by the corporate policy of the relevant provider.
Retention period
The data that we collect directly via the social media presence is deleted from our systems as soon as you request its deletion, withdraw your consent to its storage or the purpose for storing it no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions, in particular retention periods, remain unaffected.
We have no influence over the retention period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. see their privacy policies, as referred to below).
§ 13 Facebook page#
Our company has a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement sets out which of us, we or Meta, is responsible for which data processing operations when you visit our Facebook page. You can view the agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA which aims to ensure compliance with European data protection standards for data processing in the USA. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of data to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For further information, please refer to Facebook"s privacy policy: https://www.facebook.com/about/privacy/.
§ 14 Instagram page#
Our company has a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA which aims to ensure compliance with European data protection standards when data is processed in the USA. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of data to the USA is based on the EU Commission"s Standard Contractual Clauses. You can find further details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For further information on how your personal data is handled, please refer to Instagram"s privacy policy: https://help.instagram.com/519522125107875.
§ 15 Twitter page#
Our company uses the short-message service X (formerly Twitter). The provider is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
You can adjust your X privacy settings yourself in your user account; to do so, log in at the following link: https://x.com/settings/account/personalization.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA which aims to ensure compliance with European data protection standards when data is processed in the USA. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of data to the USA is based on the European Commission"s Standard Contractual Clauses. Further details can be found here: https://gdpr.x.com/en/controller-to-controller-transfers.html.
For further information, please refer to X"s privacy policy: https://x.com/de/privacy.
§ 16 LinkedIn page#
Our company has a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA which aims to ensure compliance with European data protection standards when data is processed in the USA. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of data to the USA is based on the European Commission"s standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For further information on how your personal data is handled, please refer to LinkedIn"s privacy policy: https://www.linkedin.com/legal/privacy-policy.
§ 17 YouTube#
We maintain a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details of how they handle your personal data, please refer to YouTube"s privacy policy: https://policies.google.com/privacy?hl=en.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards when data is processed in the USA. DPF certification obliges companies to comply with these data protection standards.
§ 18 Video conferencing#
Data processing
We use online conferencing tools to communicate with our customers. The tools we use are listed below. When you communicate with us by video or audio conference, your personal data is collected and processed by us and by the provider of the relevant tool.
The tools collect the data you provide, including your email address and telephone number. They also process the duration of the conference, the time at which you joined the conference, the number of participants and other metadata.
In addition, the tool provider processes all technical data required to run the conference. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, and the type of connection.
If you share content via this service, it is stored on the providers" servers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service.
Please note that we do not have full control over the data processing operations of the tools used. For further information on data processing by the conferencing tools, please refer to the privacy policies of the tools concerned.
Purpose and legal bases
The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). In addition, the tools are used to simplify and speed up communication with us and our company in general (legitimate interests within the meaning of Art. 6(1)(f) GDPR). If you have previously given consent to data processing, your data is processed solely on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
Retention period
The data collected directly by us via the video and conferencing tools is deleted from our systems as soon as you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.
We have no influence over the retention period of your data that is stored by the operators of the conferencing tools for their own purposes. For details, please contact the operators of the conferencing tools directly.
Conferencing tools used:
We use the following conferencing tools:
Skype for Business
We use Skype for Business. The provider is Skype Communications SARL, 23-29 Rives de Clausen, L-2165 Luxembourg. For details on data processing, please refer to Skype"s privacy policy: https://privacy.microsoft.com/de-de/privacystatement/.
Zoom
We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom"s privacy policy: https://zoom.us/de-de/privacy.html.
Data transfer to the USA is based on the standard contractual clauses of the European Commission. Further details are available here: https://zoom.us/de-de/privacy.html.
Use of chatbots
We use chatbots to communicate with you. Chatbots are able to answer your questions and other input without human assistance by analysing data from other sources in addition to your input (e.g. names, email addresses and other contact details, customer numbers and other identifiers, orders and chat histories). This data, as well as collected metadata (e.g. IP address, log files), is stored on the provider"s servers.
Where a legal basis exists, the chatbots may be linked to analytics and advertising tools. In this way, the collected data may be used to create user profiles and to display interest-based advertising.
The collected data may also be used to improve our chatbots and their response behaviour (machine learning).
The data you enter during communication remains with us or the chatbot operator until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
The legal basis for the use of chatbots is Art. 6(1)(b) GDPR where the chatbot is used for the initiation of a contract or in the course of performing a contract. If you have previously given consent to data processing, your data is processed solely on the basis of Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law; consent may be withdrawn at any time. In all other cases, the chatbot is used on the basis of our legitimate interests in communicating with customers as effectively as possible (Art. 6(1)(f) GDPR).
We use the following chatbots:
Melibo Chatbot
The provider is ThinkingTech GmbH & Co. KG, Darmstädter Str. 5, 64625 Bensheim, Germany.
In the course of your interaction, Melibo processes all data entered and forwards it to our internal chat systems.
For further information on data processing, please refer to Melibo"s privacy policy at https://www.melibo.de/rechtliches/datenschutz.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.
AdServer01
We use AdServer01 of adnanny.com SLU, Apartado de Correos 245, 07620 Llucmajor, Spain, as the ad server for our online offering.
An ad server is a server with software responsible for delivering and processing advertisements. In doing so, the ad server stores data such as impressions, visibility and clicks on particular advertisements and uses it for reporting purposes.
AdServer01 is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. Further information can be found in the AdServer01 privacy policy: https://adnanny.com/privacy/.
§ 19 Third-Party Services#
§ 19.1 Google Ireland Limited#
§ 19.1.1 Google Tag Manager#
On this website, we use services and functions of Google Tag Manager, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to deploy other tools on our website. It does not create user profiles, does not store cookies and does not carry out any independent analyses. However, your IP address is collected and may be transferred to the United States. Google Tag Manager itself is used solely to manage the tools that are integrated through it.
Purpose & legal basis
The use of Google Tag Manager is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw this consent at any time.
Google LLC, to which data may be transferred in the United States, is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when data is processed in the United States. Certification under the DPF obliges companies to comply with these data protection standards. In addition, the transfer of your data to the United States is based on the EU Standard Contractual Clauses. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Further information on this can be found at: https://privacy.google.com/businesses/controllerterms/mccs/.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with Google Ireland Limited.
§ 19.1.2 Google Fonts#
Nature and scope of the data processing
This website uses web fonts provided by Google to ensure the consistent display of typefaces. When you access a page, your browser loads the required web fonts into its cache so that texts and fonts are displayed correctly. To do this, the browser you are using connects to Google"s servers. As a result, Google becomes aware of your IP address.
Legal basis
The use of Google Fonts is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw this consent at any time.
Google LLC, to which data may be transferred in the United States, is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards for data processing in the United States. Certification under the DPF obliges companies to comply with these data protection standards. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
The transfer of your data to the United States is also based on the EU Standard Contractual Clauses. Further information is available at: https://privacy.google.com/businesses/controllerterms/mccs/.
§ 19.1.3 Google Maps#
Nature and scope of the data processing
This website uses Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions, it is necessary to store your IP address. As a rule, the information is transmitted to a Google server and stored there. The operator of this website has no influence over this data transmission. Where Google Maps is activated, Google may use web fonts in order to ensure a uniform display of typefaces. When you access Google Maps, your browser loads the required fonts into its browser cache so that the typefaces are displayed correctly.
Legal bases
The use of Google Maps is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw this consent at any time.
Google LLC, to which data may be transferred in the United States, is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards for data processing in the United States. Certification under the DPF obliges companies to comply with these data protection standards. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
The transfer of your data to the United States is also based on the EU Standard Contractual Clauses. Further information on this can be found at: https://privacy.google.com/businesses/controllerterms/mccs/.
§ 19.1.4 Gstatic#
On this website, we use functions of Gstatic, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Nature and scope of data processing
Gstatic is a service provided by Google to speed up the loading of web pages. Gstatic stores website resources such as images, CSS and JavaScript files on its servers so that they can be delivered to the user more quickly when pages are visited again. During this processing, technical information, such as your IP address and technical details of your browser, is transmitted to Gstatic.
The user profiles created by Gstatic are pseudonymised and cannot be traced directly back to you as an individual.
Further information can be found in Google"s privacy policy: https://policies.google.com/privacy.
Legal bases
Gstatic is used on this website on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You have the right to withdraw your consent at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards when data is processed in the United States. Certification under the DPF obliges companies to comply with these data protection standards. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
§ 19.1.5 Google DoubleClick#
On this website, we use services and functions of Google DoubleClick, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Nature and scope of the data processing
Google DoubleClick enables us to display targeted advertisements in Google applications that match users" interests. In order to offer relevant advertising, Google DoubleClick must identify users and link their website visits, clicks and other information to their user behaviour. For this purpose, Google DoubleClick uses cookies and technologies for recognising users, and creates pseudonymised user profiles based on the data collected.
Legal bases
The use of Google DoubleClick is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. Without your consent, no data processing by Google DoubleClick takes place. You may withdraw this consent at any time with effect for the future, for example via our cookie settings. The lawfulness of any processing carried out before the withdrawal remains unaffected.
Google LLC, to which data may be transferred in the United States, is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards for data processing in the United States. Certification under the DPF obliges companies to comply with these data protection standards. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
The transfer of your data to the United States is also based on the EU Standard Contractual Clauses. Further information on this can be found at https://privacy.google.com/businesses/controllerterms/mccs/.
§ 19.2 idealo internet GmbH#
§ 19.2.1 idealo CDN#
Nature and scope of the processing
In order to provide the content of our website properly, we use idealo CDN. idealo CDN is a service provided by idealo internet GmbH, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver the content of our online offering, in particular files such as graphics or scripts, more quickly by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany, whereby your IP address and, where applicable, browser data such as your user agent are transmitted. This data is processed solely for the purposes stated above and to maintain the security and functionality of idealo CDN.
Purpose and legal basis
The Content Delivery Network is used on the basis of our legitimate interests, that is, our interest in the secure and efficient provision and optimisation of our online offering pursuant to Art. 6(1)(f) GDPR.
Retention period
We have no influence over the specific retention period of the processed data; it is determined by idealo internet GmbH. Further information can be found in the privacy policy for idealo CDN: https://www.idealo.de/preisvergleich/Datenschutz.html.
§ 19.3 solute GmbH#
§ 19.3.1 billiger.de#
On this website, we use the service of the online price comparison portal billiger.de, operated by solute GmbH, Zeppelinstraße 15, 76185 Karlsruhe, Germany.
We use billiger.de in order to present you with relevant offers and price comparisons on our website. When you access a page integrated with billiger.de, a connection is established to the provider"s servers. In the process, information about your user behaviour is collected, such as the product pages viewed, the offers clicked on and, where applicable, orders placed.
Purpose and legal basis
We rely on Art. 6(1)(f) GDPR as the legal basis for the use of billiger.de to track and analyse advertising success, as we have a legitimate interest in the efficient marketing of our online offering. Where you have previously given consent to data processing by billiger.de on this website, your data is processed solely on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time.
Retention period
To attribute advertising results and commissioned sales, billiger.de stores the collected data for no longer than the period that is technically and contractually necessary (e.g. up to 30 days for commission tracking; cookies may be stored for up to 2 years). The data is then deleted or anonymised. Further information can be found in the privacy policy of billiger.de: https://www.billiger.de/info/legal/datenschutz
Data processing agreement
solute GmbH may engage Processors and apply corresponding data protection mechanisms in order to ensure the secure processing of your data. Personal data is transferred outside the EU only in compliance with statutory requirements and where appropriate safeguards are in place.
Further information on data processing can be found in the privacy policy of billiger.de at: https://merch.billiger.de/datenschutz
§ 19.3.2 ad-srv.net#
On our website, we use services delivered via the domain ad-srv.net. The provider is NEORY GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany. Among other things, NEORY operates an ad server and platforms for the purchase and management of online advertising. The service is used for the delivery, management and performance measurement of advertisements.
When relevant content is accessed, the following data in particular are processed: cookie identifiers or advertising IDs of mobile devices, truncated IP addresses, browser and device information (e.g. type, version, screen resolution), the time of access, the page accessed, and information about the advertisements served and interactions with them (impressions, clicks). The processing is carried out to serve and measure advertising and, where applicable, to create pseudonymised user profiles for interest-based advertising. This may also include matching cookie identifiers with partner companies (cookie matching). According to the provider, the cookie set by NEORY has a lifespan of 90 days after the last access.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings. NEORY participates in the IAB Europe Transparency & Consent Framework (Vendor ID 34).
According to NEORY, data processing takes place exclusively in Member States of the European Union. As a general rule, no transfer to third countries takes place.
You can contact NEORY"s data protection officer at privacy@neory.com. Further information can be found in the provider"s privacy policy: https://www.neory.com/privacy.html
§ 19.3.3 redintelligence.net#
On our website we use a retargeting service that is delivered via the domain redintelligence.net. The service was originally operated by The Reach Group GmbH, Berlin. In 2025, that company was merged into norisk GmbH, Südliche Münchner Str. 42A, 82031 Grünwald, registered with the Munich Local Court (Amtsgericht München) under HRB 184603.
When you visit our website, technical data such as your IP address, browser and device information, the URL accessed, the time of access and unique identifiers in cookies are processed. The purpose is to recognise visitors to our website in order to show them interest-based advertising on other websites (retargeting), and to measure advertising performance.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings on our website.
If you have any questions about the data processing, you can contact norisk GmbH at info@norisk.group. Further information can be found in the provider"s privacy policy at https://norisk.group.
§ 19.3.4 melibo.de#
On our website, we use the chatbot service melibo provided by ThinkingTech GmbH, Darmstädter Str. 5, 64625 Bensheim, Germany. The chatbot allows you to ask questions, which are answered automatically.
When you use the chatbot, the following data in particular are processed: connection data such as your IP address, browser and device information, and the date and time of access; the content of the conversation conducted via the chatbot, including any personal data that you provide yourself in the chat; and background information that the chatbot processes in order to respond to your enquiries. According to the provider, once the conversation has ended, the dialogues are stored in anonymised log files and used to improve the chatbot. After that point, you can only be identified if you have provided personal data in the chat yourself.
The purpose of the processing is to provide an automated means of contact and information on our website. The chatbot only processes personal data once you activate it or give your consent. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time with effect for the future.
ThinkingTech GmbH processes the data on our behalf. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. According to the provider, the software is operated via Microsoft Azure with a server location in Frankfurt am Main.
If you have any questions about data protection, you can contact the provider at legal@melibo.de. Further information can be found in the provider"s privacy policy: https://www.melibo.de/rechtliches/datenschutz
§ 19.3.5 ipdpx.de#
We use a tracking service on our website provided by Interactive Performance Deutschland GmbH, Raboisen 38, 20095 Hamburg, Germany (registered with the Hamburg Local Court under HRB 147018), which is integrated via the domain ipdpx.de.
The service is used to measure the success of advertising campaigns that Interactive Performance carries out on our behalf (e.g. whether a purchase or an enquiry can be traced back to a particular advertisement), and for retargeting, i.e. the display of interest-based advertising on other websites.
In particular, the following data is processed: your IP address, browser and device information, the pages accessed, the date and time of access, information on products viewed and orders completed, and unique identifiers. Cookies or similar technologies may be used for recognition purposes, including the analysis of browser and device characteristics (so-called fingerprinting).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings on our website.
If you have any questions about data protection, you can contact the provider at datenschutz@interactiveperformance.de. Further information is available at: https://interactiveperformance.de/kontakt/datenschutz/
§ 19.4 Criteo SA, 32 Rue Blanche, 75009 Paris, Frankreich#
§ 19.4.1 Criteo#
Criteo
Nature and scope of the data processing
On this website we use services and functions of Criteo, which are provided by Criteo SA, 32 Rue Blanche, 75009 Paris, France.
With the help of Criteo, we can show you advertisements within the Criteo advertising network that are tailored to your personal interests, which we determine from your previous user behaviour (e.g. purchases made or other actions). For this purpose, Criteo uses, for example, cookies or other identifiers to recognise you as a user and to assign your data to your pseudonymised user profile. Your data is stored by Criteo for a maximum of 13 months from the date of collection. Further information can be found in Criteo"s privacy policy at https://www.criteo.com/de/privacy/ and https://www.criteo.com/de/privacy/how-we-use-your-data/.
Legal bases
When using Criteo, we rely on Art. 6(1)(f) GDPR as the legal basis, as we have a legitimate interest in carrying out targeted advertising measures. If you have previously given consent to data processing by Criteo on this website, your data will be processed solely on the legal basis of Art. 6(1)(a) GDPR and s. 25(1) TTDSG / applicable national law. You may withdraw your consent at any time.
Criteo and we are joint controllers for the processing of your personal data (Art. 26 GDPR). The obligations that we impose on one another within the framework of this joint controllership are set out in a joint processing agreement. The essential contents of the agreement can be found at the following link: https://www.criteo.com/de/privacy/how-we-use-your-data/.
§ 19.5 Emarsys eMarketing Systems AG#
§ 19.5.1 Scarab Research#
Nature and scope of processing
We have integrated components of Scarab Research into our website. Scarab Research is a service provided by Emarsys eMarketing Systems AG and offers marketing automation software for marketing services and products, including lead management, email marketing, product recommendations and web analytics.
Scarab Research uses cookies and other browser technologies to analyse user behaviour, recognise returning users and personalise the advertising displayed. Among other things, this information is used to compile reports on website activity.
In this case, your data is disclosed to the operator of Scarab Research, Emarsys eMarketing Systems AG, Stralauer Allee 6, 10245 Berlin, Germany.
Purpose and legal basis
Scarab Research is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
We have no influence over the specific retention period of the processed data, which is determined by Emarsys eMarketing Systems AG. Further information can be found in the privacy policy for Scarab Research: https://emarsys.com/de/datenschutzrichtlinie/.
§ 19.6 Firstlead GmbH#
§ 19.6.1 ADCELL#
On this website, we use functions of ADCELL, a service provided by Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany.
Nature and scope of the data processing
ADCELL is affiliate marketing software that we use to measure and settle the performance of our affiliate partners. So that we can track which orders have been generated via our partners" affiliate links, ADCELL uses cookies and stores various data in the process: the affiliate partner"s identification number, the user"s identification number, information about the advertisement that was clicked and, where applicable, the order and product ID. ADCELL also receives your IP address and other identifiers such as your user agent. For further information, please refer to ADCELL"s privacy policy: https://www.adcell.de/datenschutz.
Legal bases
ADCELL is used on the legal basis of Art. 6(1)(a) GDPR in conjunction with s. 25(1) TTDSG (or the applicable national law), based on your consent. You may withdraw this consent at any time.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.
§ 19.7 Microsoft Corporation#
§ 19.7.1 Microsoft Advertising (ehemals Bing Ads)#
The services and functions of Bing Ads, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 (USA), are used on our website.
Nature and scope of the data processing
Bing Ads is an advertising tool that enables us to display targeted and personalised advertising to our users. For this purpose, we use cookies and similar technologies that analyse user behaviour and recognise users on our site.
The information collected through these technologies helps us to optimise the relevance of the advertising we display. Bing Ads also allows us to serve advertising to specific audiences based on user behaviour profiles and geographical location. In this context, we transmit your IP address and other device information to Microsoft.
In this case, the processed data is passed on to the operator of Bing Ads, Microsoft Corporation. Further detailed information on the use of data by Bing Ads can be found in Microsoft"s privacy statement: https://privacy.microsoft.com/de-de/privacystatement.
Legal bases
Bing Ads is used on our website on the basis of your explicit consent (Art. 6(1)(a) GDPR and s. 25(1) TTDSG / applicable national law). Visitors have the right to withdraw their consent at any time.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
§ 19.7.2 Clarity#
Nature and scope of processing
We have integrated Microsoft Clarity into our website, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft"). Clarity uses cookies and other browser technologies to analyse user behaviour on our website and to recognise users. In doing so, clicks, mouse movements and scrolling behaviour are recorded in order to create heatmaps and session recordings (session replays) and to statistically analyse visitor data.
Legal basis
The processing is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via our cookie settings. The lawfulness of any processing carried out before the withdrawal remains unaffected.
Retention period
The specific retention period is determined by Microsoft and cannot be influenced by us. Further information can be found in Microsoft"s privacy statement: https://privacy.microsoft.com/en-gb/privacystatement
Transfers to third countries
Data may be transferred to Microsoft Corporation in the United States. Microsoft Corporation is certified under the EU–US Data Privacy Framework. The transfer is therefore carried out on the basis of the European Commission"s adequacy decision (Art. 45 GDPR) and, additionally, on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR).
§ 19.8 Webgains Ltd.#
§ 19.8.1 Webgains#
Nature and scope of processing
We have integrated technologies provided by Webgains Ltd (Third Floor, 21 Farringdon Road, London, EC1M 3HA, United Kingdom) into our website. In particular, we use the so-called Webgains Mastertag (tracking container).
This service enables us to measure the success of our advertising measures as part of affiliate marketing and to display targeted advertising (Webgains Ads) to users based on their browsing behaviour. For this purpose, Webgains uses cookies and other browser technologies (e.g. tracking pixels) to analyse user behaviour and recognise end devices.
As part of this processing, information about your browsing behaviour on our website and technical data (including your IP address, your browser"s user agent, timestamps and information about purchases made or advertising materials clicked) are transmitted to Webgains. This data is used to create pseudonymised usage profiles, which are used to segment and optimise ad delivery and to ensure the correct calculation of partner commissions. We do not directly link these profiles to you as a person.
Purpose and legal basis
The use of Webgains, and the associated storage of information on your end device (or access to it), take place exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. The processing serves the purposes of audience measurement, commission settlement within the affiliate network and interest-based advertising.
Transfer to third countries
Webgains Ltd is based in the United Kingdom (UK). The European Commission has adopted an adequacy decision for the UK, confirming a level of protection equivalent to that of the GDPR. Where data is transferred in the course of processing (e.g. by sub-processors) to countries that do not offer such a level of protection, the provider states that it relies on the EU Standard Contractual Clauses as a safeguard to ensure compliance with European data protection standards.
Retention period
We have no influence over the specific retention period of the processed data and the cookies set; this is determined by Webgains Ltd. Tracking cookies generally have a lifespan of 30 to 90 days. Further information can be found in Webgains" privacy policy: https://www.webgains.com/public/de/datenschutzerklaerung/.
§ 19.9 Hotjar Limited#
§ 19.9.1 Hotjar#
Our website uses services and functions of Hotjar, an analytics tool provided by Hotjar Limited, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.
Nature and scope of data processing
Hotjar enables us to analyse user behaviour on our website. This analysis records which mouse actions you perform, how long you view particular content, and other interactions. Hotjar then creates "heatmaps", which show us which areas of the website are visited most frequently by visitors.
In addition, Hotjar provides us with information about how long you stay on a page, when you left it, and when you abandoned your entries in a contact form. As a visitor to our website, you also have the option of giving feedback on the website directly. Hotjar uses technologies (such as cookies or fingerprinting systems) to recognise website visitors on repeat visits.
Legal bases
Personal data is processed on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in analysing the use of the website in order to optimise our online presence and offerings. Where you have given consent to data processing by Hotjar on this website, the processing is carried out on the basis of Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time.
Disabling Hotjar
If you object to the processing of your personal data by Hotjar, you can disable tracking. Please note that this must be done separately for each browser or device. Detailed instructions can be found at https://www.hotjar.com/opt-out. Further information on the processing of your user data can be found in Hotjar"s privacy policy at https://www.hotjar.com/privacy.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with Hotjar.
§ 19.10 PayPal Pte. Ltd.#
§ 19.10.1 PayPal#
Nature and scope of processing
We have integrated PayPal components into our website. PayPal is a service provided by PayPal Pte. Ltd. and offers online payment solutions worldwide.
If you select PayPal as your payment method, the data required for the payment process will be transmitted automatically to PayPal Pte. Ltd., San Jose, California, US.
In this context, the following data are typically collected: name, address, company (where applicable), email address, telephone and mobile number, and IP address.
Purpose and legal basis
The service is used on the basis of the performance of a contract, i.e. to process payment transactions, in accordance with Art. 6(1)(b) GDPR.
Retention period
We have no influence over the specific retention period of the processed data, which is determined by PayPal Pte. Ltd. Further information can be found in PayPal"s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
§ 19.11 Trusted Shops GmbH#
§ 19.11.1 Trusted Shops Widget#
Nature and scope of processing
We have integrated components of the Trusted Shops Widget into our website. The Trusted Shops Widget is a review service that enables users to rate our services. If you rate our services, data about the service used may be transmitted to Trusted Shops GmbH in order to verify authenticity. The Trusted Shops Widget enables us to obtain content such as reviews directly from Trusted Shops GmbH and display it on our website. For this purpose, your current IP address is generally transmitted to the service.
In addition, the Trusted Shops Widget stores information by means of cookies in order to determine which online offerings have been visited. In this case, your data is disclosed to the operator of the Trusted Shops Widget, Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne.
Purpose and legal basis
The Trusted Shops Widget is used on the basis of Art. 6(1)(f) GDPR, in order to inform users about the quality of our services. Where the user consents to the processing of their data, the legal basis for the processing is Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
The specific retention period of the processed data cannot be influenced by us and is determined by Trusted Shops GmbH. Further information can be found in the privacy policy for the Trusted Shops Widget: https://business.trustedshops.de/impressum#datenschutz.
§ 19.12 Meta Platforms Ireland Limited#
§ 19.12.1 Meta Pixel#
On this website we use the Meta Pixel, which is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The Meta Pixel enables us to analyse the behaviour of visitors to our website who have been redirected to it by clicking on a Facebook advertisement. We use the user data to measure the success of our Facebook advertisements and to optimise them. As the website operator, we receive only anonymised data for this purpose, so we cannot identify you as a user.
Meta, however, processes the data in such a way that it can be assigned to a specific user and used for Meta"s own advertising purposes. This enables Meta to display personalised advertisements on Meta and on other websites. As the website operator, we have no influence over this. Further information on this data processing can be found in Meta"s privacy policy at https://www.facebook.com/about/privacy/.
Legal bases
When using the Meta Pixel, we rely on your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States which aims to ensure compliance with European data protection standards for data processing in the United States. Certification under the DPF obliges companies to comply with these data protection standards.
The transfer of your personal data to the United States is based on the European Commission"s Standard Contractual Clauses. Further information can be found at https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Where personal data is collected on this website by this service and passed on to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for the processing of your personal data (Art. 26 GDPR). In this context, however, we are responsible only for the collection of your data and its transmission to Meta, whereas Meta is responsible for what happens to the data thereafter. The obligations that we impose on each other as joint controllers are set out in a joint processing agreement. The full text of the agreement can be found at the following link: https://www.facebook.com/legal/controller_addendum. Accordingly, when using the Meta tool, we must provide you with data protection information and ensure that the tool is implemented on our website in a manner compliant with data protection law.
Meta itself is responsible for the security of its own products. If you wish to exercise your rights as a data subject, for example by requesting access to the data about you processed by Meta, you can contact Meta directly. If you assert your rights as a data subject against us, we are obliged to forward your request to Meta.
§ 19.13 Adform A/S#
§ 19.13.1 AdForm#
On this website, we use services and functions provided by AdForm, a service of Adform A/S, based in Copenhagen (Capital Region of Denmark).
Nature and scope of data processing
AdForm is an advertising service that makes it possible to display targeted advertising to users. Using cookies and other browser technologies, AdForm can analyse user behaviour and recognise users. In doing so, AdForm collects data on user behaviour across different websites, which can help to improve the effectiveness of advertising. AdForm also takes into account geographical data and behavioural profiles in order to deliver relevant advertising. The data sent to AdForm includes your IP address and other identifying information, such as your user agent.
It is important to note that AdForm creates pseudonymised user profiles. These cannot be linked to you as a natural person and are instead used for segmentation for advertising purposes.
Legal bases
AdForm is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
§ 19.14 advanced store GmbH#
§ 19.14.1 ad4mat Ads#
Nature and scope of processing
We have integrated ad4mat Ads into our website. ad4mat Ads is a service provided by advanced store GmbH that displays targeted advertising to users. ad4mat Ads uses cookies and other browser technologies to analyse user behaviour and to recognise users. ad4mat Ads collects information about visitor behaviour across different websites. This information is used to optimise the relevance of advertising. In addition, ad4mat Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is disclosed to the operator of ad4mat Ads, advanced store GmbH, Alte Jakobstraße 79-80, 10179 Berlin, Germany .
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
ad4mat Ads is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
The specific retention period for the processed data is not within our control but is determined by advanced store GmbH. Further information can be found in the privacy policy for ad4mat Ads: https://www.advanced-store.com/de/datenschutz/.
§ 19.15 BSmartData GmbH#
§ 19.15.1 BSmart Data#
We use technologies provided by BSmartData on our website. The provider is BSmartData GmbH, Kirchenstrasse 8, 82234 Weßling, Germany.
BSmartData enables us to create pseudonymous profiles of visitors to our online shop. By using cookies in the user"s browser, the service provider can recognise usage behaviour in our online shop and store it in this profile. This technology makes it possible to target users on external websites with offers from our product range. This process is used to re-engage users who have already shown interest in our offering in the online shop but have not yet made a purchase.
BSmartData is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TTDSG / applicable national law.
Further information on data processing can be found in BSmartData"s privacy policy at https://www.bsmartdata.com/datenschutz/.
§ 19.16 KUPONA GmbH#
§ 19.16.1 Kupona CDN#
Nature and scope of processing
To ensure the proper delivery of the content of our website, we use Kupona CDN. Kupona CDN is a service provided by KUPONA GmbH, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver the content of our online offering, in particular files such as graphics or scripts, more quickly by means of servers distributed regionally or internationally. When you access this content, you connect to servers of KUPONA GmbH, Kothenbachweg 6, 36041 Fulda, Germany, and your IP address and, where applicable, browser data such as your user agent are transmitted. This data is processed solely for the purposes stated above and to maintain the security and functionality of Kupona CDN.
Purpose and legal basis
The Content Delivery Network is used on the basis of our legitimate interests, namely our interest in the secure and efficient delivery and optimisation of our online offering, pursuant to Art. 6(1)(f) GDPR.
Retention period
We have no influence over the specific retention period of the processed data, which is determined by KUPONA GmbH. Further information can be found in the privacy policy for Kupona CDN: https://www.kupona.de/datenschutz/.
§ 19.17 adrule#
§ 19.17.1 hyj.mobi#
On our website, with your consent, we use technologies provided by adrule mobile GmbH, Feilnerstraße 10, 10969 Berlin ("adrule"). adrule is an online advertising service provider and enables us to show visitors to our website interest-based advertising on other websites and in apps (retargeting) and to measure the success of our advertising campaigns (conversion tracking).
For this purpose, adrule places cookies and similar technologies on your end device and/or reads them. To do so, your browser connects to adrule servers (including pix.hyj.mobi and d.hyj.mobi). In particular, the following data are processed:
- IP address,
- pseudonymous cookie or user IDs,
- date and time of the page view,
- pages viewed and products viewed, and the referrer URL,
- interactions with advertising materials (e.g. clicks) and completed orders (conversions),
- browser, device and language settings.
This allows your browser to be recognised on other websites and in apps so that you can be shown advertising based on your visit to our shop. You are not directly identified as a person, for example by your name.
The legal basis for the processing is your consent under Art. 6(1)(a) GDPR and s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future in the cookie settings. The lawfulness of any processing carried out before withdrawal remains unaffected.
The retention period of the cookies is determined by adrule"s specifications. The data will be deleted as soon as they are no longer required for the purpose of serving advertising or once you withdraw your consent.
We may be joint controllers with adrule for the collection of the data and its transmission to adrule (Art. 26 GDPR). adrule is solely the Controller for any further processing.
Further information on data processing and on your options to object can be found in adrule"s privacy notice: https://adrule.net/datenschutz/
§ 19.18 advanced STORE#
§ 19.18.1 ad4m.at#
Nature and scope of processing
We have integrated ad4mat Ads into our website. ad4mat Ads is a service provided by advanced store GmbH that displays targeted advertising to users. ad4mat Ads uses cookies and other browser technologies to analyse user behaviour and to recognise users. ad4mat Ads collects information about visitor behaviour across different websites. This information is used to optimise the relevance of the advertising. In addition, ad4mat Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is disclosed to the operator of ad4mat Ads, advanced store GmbH, Alte Jakobstraße 79-80, 10179 Berlin, Germany .
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
ad4mat Ads is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
We have no influence over the specific retention period of the processed data; it is determined by advanced store GmbH. Further information can be found in the privacy policy for ad4mat Ads: https://www.advanced-store.com/de/datenschutz/.
§ 19.19 IPONWEB Holding Limited#
§ 19.19.1 BidSwitch#
Nature and scope of processing
We have integrated BidSwitch into our website. BidSwitch is a service provided by IPONWEB Holding Limited that displays targeted advertising to users. BidSwitch uses cookies and other browser technologies to analyse user behaviour and to recognise users. BidSwitch collects information about visitor behaviour across different websites. This information is used to optimise the relevance of advertising. BidSwitch also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is disclosed to the operator of BidSwitch, IPONWEB Holding Limited, 4th Floor, 16 Garrick Street, Covent Garden, London, WC2E 9BA, UK.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person; instead, they are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
BidSwitch is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law.
Retention period
We have no influence over the specific retention period of the processed data; it is determined by IPONWEB Holding Limited. Further information can be found in the privacy policy for BidSwitch: https://www.iponweb.com/privacy-policy.
§ 19.20 Casale Media Inc.#
§ 19.20.1 Casale Media#
Nature and scope of processing
We have integrated Casale Media into our website. Casale Media is a service provided by Casale Media, Inc. that displays targeted advertising to users. Casale Media uses cookies and other browser technologies to analyse user behaviour and to recognise users. Casale Media collects information about visitor behaviour across different websites. This information is used to optimise the relevance of advertising. Casale Media also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is disclosed to the operator of Casale Media, Casale Media, Inc., 74 Wingold Avenue, Toronto, Ontario M6B1P5, Canada.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
Casale Media is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law.
Retention period
The specific retention period of the processed data cannot be influenced by us and is determined by Casale Media, Inc. Further information can be found in the privacy policy for Casale Media: https://casalemedia.com/legal/.
§ 19.21 AdScale (Ströer), Köln, Deutschland#
§ 19.21.1 AdScale#
With your consent, technologies provided by Ströer SSP GmbH, St.-Martin-Straße 106, 81669 Munich, Germany, a company of the Ströer Group, are used on our website. Ströer SSP operates a platform for the automated marketing of online advertising space (a supply-side platform) and enables the delivery of interest-based advertising.
For this purpose, Ströer SSP stores cookies and similar technologies on your device or reads information from them. In particular, the following data is processed:
- IP address,
- pseudonymous cookie or user IDs,
- date and time of the page visit,
- pages accessed and referrer URL,
- browser, device and language settings.
Ströer SSP may match this data with pseudonymous user IDs of other advertising service providers (known as cookie matching). This allows your browser to be recognised on other websites as well, so that advertising based on your interests can be displayed to you there and the effectiveness of advertising campaigns can be measured. You are not directly identified as a person, for example by your name.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time with effect for the future in the cookie settings. The lawfulness of any processing carried out before the withdrawal remains unaffected.
The retention period of the cookies is determined by the specifications of Ströer SSP. The data is deleted as soon as it is no longer required for the purpose of delivering advertising or you withdraw your consent. Further details can be found in the privacy notice of Ströer SSP.
We may be joint controllers with Ströer SSP for the collection of the data and its transmission to Ströer SSP (Art. 26 GDPR). Ströer SSP is solely responsible as controller for any further processing.
Further information on data processing, as well as an option to object (opt-out), can be found in the privacy notice of Ströer SSP.
§ 19.22 Horyzon Media#
§ 19.22.1 SMART AdServer#
Nature and scope of processing
We use SMART AdServer, provided by Horyzon Media, , as the ad server for our online services.
An ad server is a server running software that is responsible for delivering and processing advertisements. In this process, the ad server stores data such as impressions, viewability and clicks for specific advertisements and uses it for reporting purposes.
Purpose and legal basis
SMART AdServer is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
We have no influence over the specific retention period of the processed data; it is determined by Horyzon Media. For further information, please refer to the privacy policy for SMART AdServer: https://smartadserver.com/end-user-privacy-policy/.
§ 19.23 PubMatic Inc.#
§ 19.23.1 PubMatic CDN#
Nature and scope of processing
To ensure the proper delivery of the content of our website, we use PubMatic CDN. PubMatic CDN is a service provided by PubMatic, Inc., which acts as a content delivery network (CDN) on our website in order to ensure the functionality of other PubMatic, Inc. services. These services are covered in a separate section of this privacy policy. This section deals solely with the use of the CDN.
A CDN helps to deliver the content of our online offering, in particular files such as graphics or scripts, more quickly by means of regionally or internationally distributed servers. When you access this content, you connect to servers of PubMatic, Inc., and your IP address and, where applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of PubMatic CDN.
Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests, namely our interest in the secure and efficient delivery and optimisation of our online offering, pursuant to Art. 6(1)(f) GDPR.
Retention period
We cannot influence the specific retention period of the processed data, which is determined by PubMatic, Inc. Further information can be found in the privacy policy for PubMatic CDN: https://pubmatic.com/legal/privacy/.
§ 19.24 twiago GmbH#
§ 19.24.1 twiago Ads#
Nature and scope of processing
We have integrated twiago Ads into our website. twiago Ads is a service provided by twiago GmbH that displays targeted advertising to users. twiago Ads uses cookies and other browser technologies to analyse user behaviour and to recognise users. twiago Ads collects information about visitor behaviour across various websites. This information is used to optimise the relevance of advertising. twiago Ads also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is disclosed to the operator of twiago Ads, twiago GmbH, Gustav-Heinemann-Ufer 72b, 50968 Cologne, Germany.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
twiago Ads is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
We have no influence over the specific retention period of the processed data; it is determined by twiago GmbH. Further information can be found in the privacy policy for twiago Ads: https://www.twiago.com/datenschutz/.
§ 19.25 Google Ireland Limited#
§ 19.25.1 Google APIs (Google Hosted Libraries)#
On our website, we use what are known as "Google Hosted Libraries". This means that JavaScript libraries (e.g. jQuery) which are required for the functionality of our website are loaded via Google"s servers rather than being hosted directly on our own server. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When these external libraries are accessed, a connection to Google"s servers is established automatically. In the process, information about which of our web pages you have visited is transmitted to Google. Your IP address is also processed. This takes place regardless of whether you have a Google user account and are logged in or do not have a user account. If you are logged in to Google, your data may be assigned directly to your account. If you do not wish this assignment to take place, you must log out of Google before accessing our website.
Google Hosted Libraries are used in the interest of providing and updating our website quickly, securely and efficiently (Art. 6(1)(f) GDPR). Where consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and s. 25(1) TDDDG (formerly TTDSG) / applicable national law, insofar as the consent covers the storage of cookies or access to information on the user"s terminal device (e.g. device fingerprinting) within the meaning of that legislation. Consent may be withdrawn at any time.
It cannot be ruled out that Google transfers the data to the United States. Further information on the handling of user data can be found in Google"s privacy policy: https://policies.google.com/privacy?hl=en
§ 19.26 SP Iusupov A.A.#
§ 19.26.1 Elfsight#
On this website, we use functions and services provided by Elfsight, a service operated by SP Iusupov A.A., 0015, Armenia, Yerevan, Paronyana str., 19/3, 201.
Nature and scope of data processing
Elfsight enables us to obtain high-quality content, such as customer reviews, directly from Google and display it on our website. As part of this service, your IP address is normally transmitted to Elfsight. Further information on this subject can be found in Elfsight"s privacy policy: https://elfsight.com/privacy-policy/.
Legal bases
We use Elfsight on this website in reliance on Art. 6(1)(f) GDPR, in order to inform you about the quality of our services. Where you have given your consent to the processing of your data, the processing is based solely on Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. You may withdraw your consent at any time.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.
§ 19.26.2 Elfsight CDN#
We embed widgets provided by SP Iusupov A.A., 0015, Armenia, Yerevan, Paronyana str., 19/3, 201 (hereinafter "Elfsight") on our website.
To display these widgets (e.g. social media feeds or review tools), we use the content delivery network elfsightcdn.com. When you access a page containing such a widget, your browser establishes a connection to Elfsight"s servers. In the process, technical data, in particular your IP address and browser information, is transmitted and processed.
Legal basis
The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time via our cookie settings. Without your consent, the widgets and the associated content from elfsightcdn.com will not be loaded.
Data processing agreement
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
Further information on the handling of personal data can be found in the provider"s privacy policy at: https://elfsight.com/privacy-policy/
§ 19.27 Adobe Inc.#
§ 19.27.1 Adobe Typekit#
In order to design our website in line with consistent design standards, we use web fonts from Adobe Typekit. This service is provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
Nature and scope of data processing
When you visit our website, the required fonts are loaded from Adobe Typekit directly into your browser so that they can be displayed correctly on your device. During this process, your browser connects to Adobe"s servers in the USA, as a result of which Adobe learns that our website has been accessed via your IP address. According to Adobe, no cookies are stored in this process.
Legal bases
The storage and processing of the data is carried out on the basis of Art. 6(1)(f) GDPR, as we, as the website operator, have a legitimate interest in the consistent display of fonts on our website. Where consent to the processing of personal data (e.g. for the storage of cookies) has been given, the data processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; this consent can be withdrawn at any time.
Your personal data is transferred to the USA on the basis of the European Commission"s standard contractual clauses. Further information on this is available at: https://www.adobe.com/de/privacy/eudatatransfers.html.
To ensure that personal data is processed in accordance with our instructions and in compliance with the GDPR, we have concluded a data processing agreement (DPA) with the provider.
Further information about Adobe Typekit and its privacy policies is available at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html and https://www.adobe.com/de/privacy/policy.html.
§ 19.28 CleverPush GmbH#
§ 19.28.1 CleverPush#
Nature and scope of processing
We have integrated CleverPush into our website. CleverPush is a service provided by CleverPush GmbH, which enables us to send push notifications to users without requiring them to open the website or the relevant app.
Push notifications are messages that you can switch on or off at any time.
To subscribe to push notifications, you must confirm that your browser or end device may prompt you to receive the notifications.
Your subscription to receive push notifications is documented and stored, among other things, as proof of subscription. In this context, the following data are generally collected: time of subscription, browser type, browser version, browser ID and device ID.
CleverPush also analyses push notifications statistically in order to compile reports on the level of interest in the messages.
In this case, your data is disclosed to the operator of CleverPush, CleverPush GmbH, Nagelsweg 22, 20097 Hamburg, Germany.
Purpose and legal basis
CleverPush is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG.
Retention period
We cannot influence the specific retention period of the processed data; it is determined by CleverPush GmbH. For further information, please refer to the CleverPush privacy policy: https://cleverpush.com/de/privacy.
§ 19.29 RecoBounce GmbH#
§ 19.29.1 RecoBounce#
On this website, we use the service and conversion tool RecoBounce, provided by RecoBounce GmbH, Meerkamp 61, 26133 Oldenburg, Germany.
RecoBounce helps us to win back users who are about to leave our website and to convert them into customers by displaying targeted dynamic content. When you visit a page containing the RecoBounce module, a connection is established to the provider"s servers. In this process, technical information such as your IP address (truncated/anonymised), browser information, pages visited and interaction data may be collected and analysed in pseudonymised form.
Purpose and legal basis
Personal data is processed in order to improve the user experience, to analyse exit behaviour and to optimise our online shop. The data processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you give via our consent/cookie banner. You may withdraw your consent at any time.
Retention period
The data collected by RecoBounce will be deleted or anonymised once the purpose has been fulfilled or you withdraw your consent. Cookies and similar technologies have a technically limited lifespan and will be deleted if you withdraw your consent.
Data processing agreement
We have concluded a data processing agreement with RecoBounce GmbH pursuant to Art. 28 GDPR, which ensures the protection of your data. The processing takes place exclusively within Germany or the EU in accordance with the applicable data protection requirements under the GDPR.
Further information can be found in RecoBounce"s privacy policy at: https://recobounce.com/datenschutz/
§ 19.30 GP One GmbH#
§ 19.30.1 GSI ( Schutz vor Werbebetrug)#
On our website, with your consent, we use the "GSI" service provided by GP One GmbH, Otto-Wickenhöfer-Str. 7a, 35108 Allendorf/Battenfeld (Eder) ("GP One").
GSI is used to detect fraudulent or automated access to our website, in particular via advertisements (e.g. by bots or fake clicks), and to ensure the quality of our advertising campaigns.
For this purpose, your browser connects to GP One servers (including p.gsitrix.com). In doing so, cookies and similar technologies may be placed on your end device and information may be read from your end device. In particular, the following data are processed:
- IP address,
- date and time of the page view,
- pages accessed and referrer URL (e.g. the advertisement through which you reached us),
- browser, device and system information (e.g. browser type, operating system, screen resolution, language settings),
- where applicable, pseudonymous identifiers.
These data are used to assess whether access originates from a human or from an automated programme. Your person is not directly identified, for example by your name.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and s. 25(1) TDDDG. You may withdraw your consent at any time with effect for the future in the cookie settings. The lawfulness of any processing carried out before the withdrawal remains unaffected.
The retention period is determined by GP One"s specifications. The data are deleted as soon as they are no longer required for the purpose of fraud detection or you withdraw your consent.
Further information about GSI is available at https://www.gsi-one.org.
Last updated at 06.11.2026 · last checked on 07.11.2026
