PRIVACY POLICY
Unless
otherwise specified below, the
provision of your personal data is neither legally nor contractually
required, nor is it necessary for the conclusion of a contract. You are
not obliged to provide the data. Failure
to provide the data
will have no consequences. This only applies insofar as no other information is
provided in the following
processing operations. "
Personal
data" is any information relating to an identified or
identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Each time
you access our website, information is transmitted to us or our web host/
IT service provider.
and stored in log data (so-called server log files). This
stored data includes, for example, the name of the page
accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring
the smooth operation of our website and improving our offering.
Contact
the person responsible
Contact us if you wish. The person responsible for data processing is: Melanie Williams, Jahnstr.
8-10, 63505 Langenselbold, Germany, 06184-93610, datenschutzbeauftragter@koi-company.de
Proactive contact by the customer via email
If
you proactively contact us via email, we will collect
your personal data (name, email address,
message text)
only to the extent that you provide it. The
purpose of data processing is to process and respond to your
contact request.
If
the purpose of the contact is to carry out pre-contractual measures (e.g.
advice on purchase interest, preparation of an offer) or concerns a
contract already concluded between you and us, this data processing is carried out
on the basis of Art. 6 (1) lit.
b GDPR.
If
the contact is made for other reasons, this
data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to
our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to
object at any time to the processing of your
personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. We only
use your email address to process your enquiry. Your data will then be deleted in accordance with statutory
retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When
you use the contact form, we collect your personal
data (name, email address, message text) only to the extent that
you provide it. The purpose of data processing is to establish contact.
If
the purpose of establishing contact is to carry out pre-contractual measures (e.g.
advice on purchase interest, preparation of offers) or concerns a
contract already concluded between you and us, this data processing is carried out
on the basis of Art. 6 para. 1 lit.
b GDPR.
If
contact is made for other reasons, this
data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to
our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the
right to object at any time to the processing of personal data concerning
you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. We only
use your email address to process your enquiry. Your data will then be deleted in accordance with statutory
retention periods, unless you have consented to further processing and use.
Collection and processing for applications by e-mail
Visitors to the site
can apply by e-mail for vacant positions advertised on our website
if they are interested. In this case,
we only collect your
personal data to the extent that you provide it
. This includes your contact details (e.g.
name, e-mail address,
telephone number), information about your professional qualifications and
education, information about further professional training
and performance-specific evidence.
The
purpose of data processing is to establish contact and
decide whether to enter into an employment relationship
with you. The provision of data is necessary in order to carry out the application process. Your
personal data is processed
on the basis of Art. 6 (1) lit. b GDPR in conjunction with § 26
(1) BDSG for the implementation of pre-contractual
measures (completion of the application process as a prelude to an employment contract).
If
you have given us your consent to process personal data
for inclusion in our applicant pool,
e.g. by
ticking a checkbox, the processing is carried out on the basis of Art. 6
(1) lit. a GDPR. You can revoke your consent
at any time
without affecting the lawfulness
of the processing carried out on the basis of the
consent until revocation.
If, in the course of the application process, special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from
applicants
, such as information on the degree of severe disability,
this is done on the basis of Art. 9 (2) lit. b
GDPR so that we
can exercise the rights arising from labour law and social
security and
social protection law and fulfil our obligations in this regard.
We
store your personal data for as long as this is necessary for
deciding on your application. Your data will
then be
deleted after six months at the latest, unless you have consented to further
processing and use.
If the application process results in an employment relationship, the data provided will be further processed on
the basis of
Art. 6 (1) lit. b GDPR in conjunction with § 26 (1) BDSG for the purposes of
carrying out the employment relationship
and then transferred to the personnel file.
WhatsApp Business
If
you contact us via WhatsApp for business purposes, we use
the WhatsApp Business version of WhatsApp Ireland Limited
(4 Grand
Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If
you are located outside the European
Economic Area
, this service is provided by WhatsApp Inc. (1601 Willow Road,
Menlo Park, CA 94025, USA).
Data processing
is used to process and respond to your contact request. For this
purpose, we collect and process your mobile phone number stored with
WhatsApp
mobile phone number stored with WhatsApp, your name (if provided) and other data to the
extent that you have provided
it. We use a mobile device for the
service, in whose address book only data
from users who have contacted
us via WhatsApp is stored. Personal data will therefore not be passed on to WhatsApp without your prior consent to
WhatsApp.
Your
data is transferred by WhatsApp to servers of Meta Platforms Inc. in the USA
. An adequacy decision
by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Meta Platforms Inc. has certified itself under
the TADPF and is therefore committed to complying with European data protection principles. If the
purpose of the contact is to carry out pre-contractual
measures (e.g. advice on purchase interest, preparation of offers)
or relates to a contract already concluded between
you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If
the contact is made for other reasons, this
data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due
to our
overriding legitimate interest in providing a quick
and easy way to contact us and in responding
to your enquiry. In this case, you have the right to object at any time to the processing of personal data concerning you based on
Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. We only
use your
personal data to process your enquiry.
Your data will then be deleted in accordance with statutory
retention periods, unless you have consented to further processing and use.
For more information on the terms of use and data protection when using WhatsApp, please visit
https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account Orders
Customer
account When
you open a customer account, we collect your personal
data to the extent specified there. The purpose of data processing
is to
improve your shopping experience and simplify order processing
. Processing is carried out on the basis of
Art. 6 (1)
lit. a GDPR with your consent. You can revoke your consent
at any time by notifying us, without affecting the
lawfulness
of the processing carried out on the basis of your consent until revocation.
Your customer account will then
be deleted.
Collection, processing and disclosure of personal data for orders
When
you place an order, we collect and process your personal data
only to the extent necessary to fulfil and process your order
and
to process your enquiries. The provision of
data is necessary for the conclusion of the
contract. Failure to provide
data will result in no contract being concluded. The
processing is based on Art. 6 para. 1 lit. b
GDPR and is necessary for the performance of a contract with you. Your data
will be passed on, for example, to shipping companies, drop shipping or fulfilment providers,
payment service providers,
service providers for order processing and IT service providers. In
all cases, we strictly comply with the legal
requirements. The scope of data transfer is limited to a minimum.
Reviews Advertising
Use of your personal data for sending postal advertising
We
use your personal data (name, address) that we have
received in
connection with the sale of goods or services to
send you postal advertising, provided that you have not objected to this use
. The provision of this
data is necessary for
the conclusion of the contract. Failure to provide this data will
result in no contract being concluded.
Processing
is based on Art. 6 (1) lit. f GDPR on the basis of our
overriding legitimate interest in direct marketing.
You can object to this use of your address data at any time by notifying us. The contact details for exercising
your right to object can be found in the legal notice.
Use of your email address for sending newsletters
We
use your email address independently of the contract processing
exclusively for our own advertising purposes to send newsletters,
provided that
you have expressly consented to this. The processing is carried out on the
basis of Art. 6 (1) lit. a GDPR with your consent.
You
can revoke your consent at any time without affecting the
lawfulness of the processing carried
out on the basis of your consent until revocation.
You can unsubscribe from the newsletter at any time by using
the corresponding link in the newsletter or by
notifying us. Your email address will then be removed from the distribution list.
Use of Klaviyo
We
use the services of Klaviyo Inc. (125
Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") for newsletter distribution within
the scope of order processing.
We pass on the information you provide during the newsletter registration (e-mail address, first and
last name if applicable) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to
evaluate newsletter campaigns, the newsletters sent contain
a 1x1 pixel graphic (tracking pixel) or a tracking
link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this
context,
we collect your personal data such as your IP address,
browser type and device, and the time. This
data can be used to
create usage profiles under a pseudonym. The data collected
is not used to
identify you personally.
The data collected is only used for statistical evaluation to
improve newsletter campaigns.
Your data is usually transferred to Klaviyo's servers in the USA and stored there. For the USA, there is an
adequacy decision
by the EU Commission, the Trans-Atlantic Data Privacy Framework
(TADPF). Klaviyo has certified itself under the
TADPF and is therefore committed to complying with European data protection principles. Your personal
data is processed on the basis of Art. 6 (1) (f) GDPR in accordance with our overriding
legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object to this processing of your personal
data at any time for
reasons arising from your particular situation.
For more information on data protection at Klaviyo, please visit
https://www.klaviyo.com/legal/privacy-notice and https://www.klaviyo.com/legal/data-processing-agreement.
Use of email address for availability
notifications We
offer a product availability notification service on our website.
If an item is temporarily unavailable, you
have the option of entering your email address for
the item in question and receiving an email notification from us when it becomes available,
provided you have agreed to this.
You You
will receive a one-time notification by
e-mail when the
item is available. The
processing is based on Art. 6 para. 1 lit. a GDPR with
your consent. You may revoke your consent
at any time
without affecting the lawfulness of the processing carried out on the basis of your consent until
revocation. You
may
unsubscribe from the availability notification at any time by notifying us.
Your email address will then be removed from the
distribution list.
Shipping service providers
Disclosure of your email address to shipping companies for information about the shipping status
We
disclose your email address to the transport company for the purpose of contract processing, provided that you have expressly agreed to this during
the ordering process.
The purpose of this disclosure is to inform you by email about
the shipping status. The processing
is carried out on the
basis of Art. 6 para. 1 lit. a GDPR with your consent. You
can revoke your consent at any time by notifying us or
the
transport company, without affecting the lawfulness of the
processing carried
out on the basis of your consent until revocation.
Payment service provider Credit
check Use of PayPal
We
use the PayPal payment service from PayPal
(Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449,
Luxembourg; "PayPal") on our website. The purpose of data processing is to offer you payment via the payment service. When
you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the
contract
with you using the selected payment method. This
processing is based on Art. 6 (1) (b) GDPR.
All PayPal transactions are subject to the PayPal privacy policy. This can be found
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We
use the PayPal Express payment service from
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-
2449,
Luxembourg; "PayPal"). The purpose of data processing is to enable us
to offer you
payment via the PayPal Express payment service.
In order to
integrate this payment service, it is necessary for PayPal to
collect, store and analyse data (e.g. IP address, device type,
operating system,
browser type, location of your device) when you visit the website.
Cookies may also be used for this purpose. Cookies
enable your browser to be recognised.
The
use of cookies or comparable technologies is based on your
consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6
(1) lit. a GDPR. The processing of your personal data
is carried out with your consent on the basis of Art. 6 para. 1 lit.
a
GDPR. You can revoke your consent at any time without affecting the
lawfulness of the processing carried out
on the basis of your
consent until revocation. When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract
with you using the selected payment method. This
processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
For more information on data processing when using the PayPal Express payment service, please refer to the relevant
privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We
use the PayPal Check-Out payment service from
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard
Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to
enable us to offer you payment via the payment service.
When you select and use payment via PayPal, credit card via PayPal,
direct debit via PayPal or "Pay later" via PayPal
, the
data required for payment processing is transmitted to PayPal in order to
fulfil
the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR.
Cookies may be stored in this process, which enable your browser to be recognised. The resulting
data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in offering a
customer-oriented range of different payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular
situation.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For
individual payment methods such as credit card via PayPal, direct debit via
PayPal or "Pay later" via PayPal, PayPal reserves the
right
to obtain credit information based on
mathematical-statistical methods using credit agencies
if necessary. To this end,
PayPal transmits the personal data required for a credit check
to a credit agency and uses the
information
received about the statistical probability
of a payment default to make a balanced decision about the
establishment,
execution or termination of the contractual relationship.
The credit report may contain probability values (score values)
calculated
on the basis of scientifically recognised
mathematical-statistical methods, which
include address data in
their calculation. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The
data processing
serves the purpose of credit assessment for the initiation of a contract. The
processing is carried out on the basis of Art. 6 (
1) lit. f GDPR due to our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to this processing of personal data concerning you based on Art. 6 (1) lit. f
GDPR at any time for reasons arising from your particular situation by notifying PayPal. The
provision
of data is necessary for the conclusion of the contract with your desired
payment method. Failure to provide this data will
result in the contract not being concluded with your chosen payment method.
Third-party
providers When
paying via a third-party provider, the data required for
payment processing is transmitted to PayPal.
This
processing is carried out on the basis of Art. 6 (1) lit. b GDPR. In order to
execute this payment
method, the data may then be passed on by
PayPal to the respective provider. This processing
is carried out on the basis of Art. 6 (1) lit. b GDPR. Local
third-party providers may include, for example:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
Purchase on account via PayPal
When paying by purchase on account, the data required for payment processing is first transmitted to
PayPal.
In order to carry out this payment method, the data is then transmitted by
PayPal to Ratepay GmbH (Franklinstraße 28-29,
10587 Berlin;
"Ratepay") in order to fulfil the contract with you using the selected
payment method. This processing is carried out on
the basis of
Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit check
on the basis of mathematical-statistical methods
(probability or score values) using credit agencies in accordance with the procedure described above. The
data processing
serves the purpose of credit assessment for the initiation of a contract. The
processing is carried out on the basis of Art. 6 (
1) lit. f GDPR from
our overriding legitimate interest in protection against
payment default if Ratepay makes advance payments.
Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-
payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the relevant privacy policy at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Data collection and processing when registering for instalment purchases via easyCredit
When paying by instalment via easyCredit, the supplementary data protection information on instalment purchases from easyCredit applies.
Data collection and processing during credit checks
If
we make advance payments, e.g. for payment on account or
direct debit, we reserve the right to obtain credit information
based on mathematical-statistical methods using Creditsafe Deutschland GmbH, Sonnenallee 221 F, 12059
Berlin
. For this purpose, we transfer the personal data required for a credit check
to this company and use the information
received
about the statistical probability of
payment default for a balanced decision on the
establishment,
execution or termination of the contractual relationship. The
credit report may contain probability values
(score values)
calculated on the basis of scientifically recognised mathematical-statistical
methods, which include, among other things,
address data in their calculation. Your interests worthy of protection are taken into account in accordance with
the statutory provisions. The
data processing
serves the purpose of credit assessment for the initiation of a contract. The
processing is carried out on the basis of Art. 6 (
1) lit. f GDPR from our overriding legitimate interest in protection against payment default if we make advance payments. You have
the right to object to this processing of your personal data based on Art. 6
para. 1 lit. f GDPR at any time for reasons arising from your particular situation by notifying us. The provision of
data
is necessary for the conclusion of the contract with your desired payment method
. Failure to provide this data will result in the contract
not being concluded with your chosen payment method.
Use of Klarna payment options
We
use the payment service of Klarna Bank AB
(publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website.
When
selecting and using payment via Klarna, the data required for
payment processing is transmitted to Klarna in order to fulfil the
contract
with you using the selected payment method. This
processing is carried out on the basis of Art. 6 (1) (b) GDPR. Cookies may be
stored in this process, which enable your browser to be recognised. The resulting
data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in a
customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular
situation.
"Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant transfer), "Financing" (hire purchase) For
individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment
by direct debit, credit card, instant transfer), "Financing"
(hire purchase)
Klarna reserves the right to obtain credit information on the
basis of mathematical-statistical methods using
credit agencies.
For this purpose,
Klarna transmits the personal data required for a credit check,
such as first and last name,
address, gender, e-mail address, IP address and data related to the order, to a credit agency for the purpose of
identity
and credit checks and uses the information obtained
about the statistical probability of
a payment default
to make a balanced decision on the establishment, implementation or
termination of the contractual relationship. The
credit report may
contain probability values (score values) that are calculated on the basis of
scientifically recognised
mathematical-statistical methods
and which include address data, among other things, in their calculation.
Your interests worthy of protection will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is based on Section 6 (1) lit. f BDSG. Your interests worthy of protection
are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the
initiation of a contract. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate
interest in protection against payment default if Klarna makes advance payments. You have the right to object to the processing of your
personal data based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your
particular situation by notifying Klarna. The provision of data is necessary for the conclusion of
the contract with the
payment method you have chosen. Failure to provide this data
will mean that the contract cannot be concluded with your chosen
payment method.
Further information, in particular which credit agencies Klarna passes on your personal data to, can be found at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna is available at: https://www.klarna.com/de/. Your personal data will be handled by Klarna in
accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer
system. When a user accesses a website, a cookie may be stored on the
user's operating system.
This cookie contains a characteristic
string of characters that enables the browser to be uniquely identified when the website
is accessed again.
Cookies
are stored on your computer. Therefore, you have full
control over the use of cookies. By selecting
the appropriate
technical settings in your internet browser, you can be notified before
cookies are set and decide individually whether
to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that
have already been stored
can be deleted at any time. However, we would like to point out
that you may not be able to use all
the functions of this website to their full extent.
The links below provide information on how to manage (including
deactivating) cookies in the most popular browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-
2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary
cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable
our
systems to recognise your browser even after you have changed pages and to
offer you services. Some functions of
our website
cannot be offered without the use of cookies. For these,
it is necessary that the browser is recognised even after a
page change.
The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. The processing of
your personal
data is based on Art. 6 (1) lit. f GDPR from our
overriding legitimate interest in ensuring
the
optimal functionality of the website and a user-friendly and
effective design of our offer.
You have the right to object to this processing of
personal data concerning you at any time for reasons arising from your particular situation.
Use of the Cookie Consent Manager from Shopware
We use the Cookie Consent Manager from shopware AG (Ebbinghoff 10, 48624 Schöppingen; "Shopware") on our website.
The
tool allows you to give consent to data processing via
the website
, in particular the setting of cookies, and to exercise your right of withdrawal for consents already given. The purpose of data processing is to
obtain and document the necessary
consent to data processing
and thus to comply with legal obligations. Cookies may be
used for this purpose
. User information, including your
IP address, is collected and transmitted to Shopware. This
data is not passed on to other third parties.
Data processing is carried out to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR.
Further information on data protection at Shopware can be found at: https://www.shopware.com/de/datenschutz/.
Analysis Advertising tracking Communication
Use of Google Analytics 4
We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street,
Dublin 4, Ireland; "Google") on our website.
The
purpose of data processing is to analyse this website and its
visitors, as well as for marketing and advertising purposes. To this end,
Google will use the information obtained
on behalf of the operator of this website
to evaluate your use of the website, to compile
reports on website activity and to provide other services
relating to website activity and internet usage to the website operator.
The
following information, among other things, may be collected: IP address, date
and time of page view, click path, information about
the browser
and device you are using,
pages visited, referrer URL (website from which you accessed
our website
), location data, purchasing activities. Your data may
be linked by Google to other data, such as
your search history, your personal accounts, your usage data from other devices and any other data that Google has about
you.
The
IP address is truncated by Google within member states of the
European Union or in other states party to the Agreement
on the European Economic Area.
Google
uses technologies such as cookies, web storage in the browser and
tracking pixels, which enable an analysis
of your use of the website.
The use of cookies or comparable technologies is carried out with
your consent on the basis of Section 25 (1) sentence 1
TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
The
processing of your personal data is carried out with your
consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can
revoke your
consent at any time without affecting the lawfulness
of the processing carried out on the basis of your consent until revocation.
We use the extended implementation of the
Advanced Consent Mode. In this case, even if
consent has not
been given, user data is transmitted to Google in the form of
"pings". These pings may contain the following information, among other things
: IP address
to derive the IP country (the
IP address is not logged), date and time
of the page view, URL of the pages
visited, user agent, referrer URL
(website from which our website was accessed) or information
about the triggering of website
events such as a conversion.
Based on this information, Google models
user data in order to be able to carry out a
comprehensive usage analysis despite the refusal of consent.
The information generated about your use of this website is usually transferred to a
Google server in the USA
and stored there. For the USA, there is an adequacy decision by the
EU Commission, the Trans-Atlantic Data
Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European
data protection principles. Both Google and US government authorities have access to your data.
For more
information on terms of use and data protection,
please visit
https://policies.google.com/technologies/partner-sites
and https://policies.google.com/privacy?hl=de&gl=de.
Use of Meta Pixel
We
use Meta Pixel from Meta Platforms Ireland Limited
Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin
2, Ireland; "Meta") on
our website. Meta
and we are jointly responsible for the collection of your data when the
service is integrated and the transfer
of this
data to Meta. The basis for this is an agreement between us and
Meta on the joint processing of personal
data, which defines the respective responsibilities. The agreement is available at
https://de- en.facebook.com/legal/terms/businesstools
. According to this agreement, we are responsible in particular for
fulfilling the information obligations
under Articles 13 and 14 of the GDPR, for
complying with the security requirements of Article 32 of the GDPR with regard to
the correct technical
implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 GDPR, insofar as a
breach of personal data protection affects our obligations
under the joint processing agreement.
Meta is responsible for enabling data subjects to exercise their rights under Articles 15
- 20 GDPR, to comply with the security requirements of
Art. 32 GDPR
with regard to the security of the service, and to comply with the
obligations under Art. 33, 34 GDPR, insofar as a
breach of the protection of personal data affects Meta's obligations under the joint
processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the social networks
Facebook and Instagram. To this end, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to
Meta's servers when
you visit the website.
This transmits to Meta's server which
of our
pages you have visited. Meta assigns this information to your
personal Facebook and/or Instagram user account.
When you visit the social networks Facebook or Instagram, you will then be shown
personalised, interest-based ads.
The
application also serves the purpose of generating conversion statistics
. This tells us the total number of users who
clicked on
one of our ads and were redirected to a page with a
conversion tracking tag,
as well as what
actions were taken after being redirected to this website.
However, we do not receive any information that can be used to personally identify
users.
Your
data may be transferred to the USA. For the USA, there is an
adequacy decision by the EU Commission,
the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and is therefore committed to complying with European
data protection principles.
The
processing of your personal data is carried out with your
consent on the basis of Art. 6 (1) (a) GDPR. You can
revoke your
consent at any time without affecting the lawfulness
of the processing carried out on the basis of your consent until revocation.
You
can
You can deactivate the "Custom
Audiences" remarketing function here. For more information on the collection and
use of data
by Meta, your rights in this regard and
options for protecting your privacy, please refer to Meta's
privacy
policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising programme "Google Ads" on our website and, within this framework, conversion tracking
(visit action evaluation).
Google conversion tracking is an analysis service provided by Google Ireland
Limited (Gordon
House, Barrow
Street, Dublin 4, Ireland; Google). When
you click on an ad placed by Google, a cookie
for conversion tracking is stored on your computer. These
cookies
have a limited validity, do not contain any personal
data and therefore cannot be used for personal identification.
If
you visit certain pages on our website and the cookie has not yet
expired, Google and we can recognise that you clicked
on the
ad and were redirected to this page. Each
Google Ads customer receives a different cookie. This means
that cookies cannot be tracked across the websites of Ads customers.
The
information collected using the conversion cookie
is used to generate conversion statistics. This
tells us
the total number of users who clicked on one of our adverts
and were redirected to a page tagged with a
conversion tracking tag
. However, we do not receive any information that
can be used to personally identify users. We
use the advanced implementation of consent mode (Advanced Consent Mode). In this case, even if consent
has not been given,
user data is transmitted to Google in the form of "pings". These pings
may contain the following information, among other things: IP address
to derive
the IP country (the IP address is not logged),
date and time of the page view, URL of the pages
visited,
user agent, referrer URL (website from which our website was accessed
) or information about the triggering of website events
such as a conversion. Based on this information,
Google models user data in order to be able to carry out a
comprehensive usage analysis despite the refusal of consent.
Your
data may be transferred to the servers of Google LLC in the USA
. For the USA, there is an adequacy decision by
the EU Commission
, the Trans-Atlantic Data Privacy Framework (TADPF). Google
has certified itself under the TADPF and is therefore
committed to complying with European data protection principles.
The
use of cookies or comparable technologies is carried out with your
consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction
with Art. 6
(1) lit. a GDPR. The processing of your personal data
is carried out with your consent on the basis of Art. 6 para. 1 lit.
a
GDPR. You can revoke your consent at any time without affecting the
lawfulness of the processing carried out on the basis of your
consent until revocation.
For more information and Google's privacy policy, please visit: https://www.google.de/policies/privacy/
Use of the remarketing or "similar audiences" function of Google Inc.
We
use the remarketing or "similar
audiences" function of Google Ireland Limited (Gordon House,
Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application is used to analyse visitor behaviour and interests. Google uses cookies to analyse website
usage,
which forms the basis for creating interest-based
advertisements. The
cookies
record visits to the website and anonymised data about
website usage. No personal data of
website visitors is stored. If you then visit another website in the Google Display Network, you
will be shown advertisements that are highly likely to take into account previously
viewed product and information areas.
Your
data may be transferred to Google LLC servers in the USA
. An adequacy decision by the EU
Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Google has certified itself under the TADPF and is therefore
committed to complying with European data protection principles.
The
use of cookies or similar technologies is based on your
consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6
(1) lit. a GDPR. The processing of your personal data
is carried out with your consent on the basis of Art. 6 para. 1 lit.
a
GDPR. You can revoke your consent at any time without affecting the
lawfulness of the processing carried
out on the basis of your
consent until revocation. For more information about Google Remarketing and the associated privacy policy, please visit:
https://www.google.com/privacy/ads/
Use of Zoom
We use the video conferencing tool Zoom from Zoom Video Communications, Inc.
(55 Almaden Boulevard, San Jose, CA 95113, USA; "Zoom") to conduct our online seminars/courses (hereinafter: online seminars) within the framework of
a data processing agreement. (55
Almaden Boulevard, San Jose, CA
95113, USA; "Zoom").
Participation in our online seminars can be done via the Zoom app (after downloading it from the provider's website) or via the
browser version
on the provider's website. To participate in our
online seminars, it is therefore necessary to
visit the
website of the provider Zoom at least once. Zoom is responsible for the
processing of your data that takes place there. We
are responsible
for the
processing of your personal data in connection with the
conduct of our online seminars.
This data processing serves the purpose of conducting, preparing and following up on our online seminar.
For this purpose, we collect and process the following personal data: name, email address, password (unless
single sign-on was used), IP address, information about the device used, date/time of the online seminar and, for
telephone dial-in,
the incoming and outgoing phone number and the country. The provision of
this data is necessary for the fulfilment of the contract concluded between you
and us
for the provision of the online seminar
. Failure to provide this data will result in
you being unable to participate in our online seminar.
In addition, we collect and process text entries made by you during the online seminar as well as video and
audio transmissions
from your device. You can deactivate your camera and microphone before entering
the online seminar and at any time during
the online seminar. In this case, no data will be collected. If you do not wish to provide data via the chat, camera or
audio functions
, you will not be able to actively participate in the
online seminar or communicate with other participants.
If
we record our online seminars for follow-up purposes, in particular for
subsequent provision to the respective participants,
, you will be informed of this separately before the start of the online seminar. You can also recognise a recording by the
label
during the online seminar. In the event of a recording, your name,
any text entries made in the chat and video/audio
transmissions from your device will be stored and, if necessary, subsequently transmitted to the respective participants of the online seminar.
The data collected during our online seminars is transferred to Zoom and thus
to the USA within the framework of the order processing agreement. For the USA, an adequacy decision
by the EU Commission is in place, the Trans-Atlantic Data Privacy
Framework
(TADPF). Zoom has certified itself under the TADPF and is therefore
obliged to comply with European data protection principles.
The
processing is carried out on the basis of Art. 6 (1) lit. b GDPR and
is necessary for the performance of a contract with you.
For more information on data processing when using Zoom, please visit: https://zoom.us/de-de/privacy.html
Plug-ins and other
Use of Google Tag Manager
We
use Google Tag Manager from Google Ireland
Limited (Gordon House, Barrow Street, Dublin 4, Ireland;
"Google") on our website.
This
application manages JavaScript tags and HTML tags that are
used to implement tracking and analysis
tools in particular.
The data processing serves the purpose of The purpose of data processing is to
design and optimise our website in line with user needs.
Google Tag Manager itself does not store cookies or process personal data.
However, it enables the
triggering of additional tags that can collect and process personal data.
You can find more information on terms of use and data protection here.
Use of Cloudflare Turnstile
We use Cloudflare Turnstile (hereinafter "Turnstile") on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter "Cloudflare").
Turnstile is used to check whether data entry on this website (e.g. in a contact form) is made by a human or by an automated programme. To do this, Turnstile analyses the behaviour of the website visitor based on various characteristics.
This analysis starts automatically as soon as the website visitor enters a website with Turnstile activated. Turnstile evaluates various information for the analysis (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare.
The data is stored and analysed on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.
For more information about Cloudflare Turnstile, please refer to the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5666.
Use of Google
Maps
We
use the function for embedding
Google Maps maps from Google Ireland Limited (Gordon House, Barrow
Street, Dublin 4, Ireland, "Google") on our website.
This
function enables the visual representation of geographical
information and interactive maps. When
calling up pages in
which Google Maps maps are embedded, Google also
collects, processes and
uses data from visitors to the websites.
Your
data may also be transferred to the USA. For the
USA, there is an adequacy decision
by the EU Commission, the
Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the
TADPF and is therefore committed to complying with
European data protection principles.
The
use of cookies or comparable technologies is based on your
consent in accordance with Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6
(1) lit. a GDPR. The processing of your personal data
is carried out with your consent on the basis of Art. 6 para. 1 lit.
a
GDPR. You can revoke your consent at any time without affecting the
lawfulness of the processing carried out
on the basis of your
consent until revocation. For more information on the collection and use of data by Google, please refer to Google's privacy policy at
https://www.google.com/privacypolicy.html.
There you also have the option of changing your settings in the privacy centre
so
that you can manage and protect your data processed by Google.
Use of YouTube
We
use the function for embedding YouTube videos
YouTube videos from Google Ireland Limited (Gordon House, Barrow
Street,
Dublin 4, Ireland; "YouTube"). YouTube is a company affiliated with Google LLC (1600
Amphitheatre Parkway, Mountain View, CA 94043, USA; "
Google").
The
function displays videos stored on YouTube in an iFrame on the
website. The "extended data protection mode"
option is activated.
This means that YouTube does not store any information about visitors to the
website. Only when you watch a
video is information about it transmitted to YouTube and stored there. Your data may be transferred to the
USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework
(TADPF). YouTube has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The
use of cookies or comparable technologies is carried out with your
consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6
(1) lit. a GDPR. The processing of your personal data
is carried out with your consent on the basis of Art. 6 para. 1 lit.
a
GDPR. You can revoke your consent at any time without affecting the
lawfulness of the processing carried out on the basis of your
consent until revocation.
For more
information on the collection and use of data by YouTube and
Google, your rights in this regard and options
for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy
.
Integration of the Händlerbund member logo
The
Händlerbund member logo (Händlerbund e.V.,
Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When
you visit
our website, the browser used on your device
automatically sends information to the
Händlerbund e.V. server. This information is temporarily stored in a so-called server log file for 7 days. The following
information is collected without your intervention and stored until it is automatically deleted:
IP address of the requesting computer,
date and time of access,
name and URL of the file accessed,
website from which access is made (referrer URL), browser
used and, if applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. For this purpose
,
the IP address must remain stored for the duration of the session.
Storage in log files is done to ensure the functionality of
the website. In addition, the data is used to optimise the website and to ensure the security of the
information technology systems. This data is not stored together with other personal data.
The legal basis for data processing is Art. 6 (1) (f) GDPR.
Rights of data subjects and storage
period Duration of storage
After
complete contract processing, the data will initially be stored for the
duration of the warranty period, then in accordance with
statutory,
in particular tax and commercial law retention periods,
and then deleted after the expiry of the period, unless you have consented
to further processing and use.
Rights of the data subject
If the
legal requirements are met, you have the following rights
under Articles 15 to 20 of the GDPR: right to information, right to
rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art.
6(1)(f) GDPR and to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you
have the right to lodge a complaint with the supervisory authority
if you believe that the processing
of your personal data is not lawful. You
can lodge a
complaint with the supervisory authority responsible for us
supervisory authority responsible for us, which you can contact at the following
address:
Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
E-mail: poststelle@datenschutz.hessen.de
Right
to object If
the processing of personal data listed here is based on
our legitimate interest pursuant to Art. 6 (1) lit.
f
GDPR, you have the right to object to this processing at any time with effect
for the future for
reasons arising from your particular
situation. After
you have objected, the processing of the data concerned will be
terminated, unless we can demonstrate compelling legitimate grounds
for
the processing that outweigh your interests, rights and
freedoms, or if the processing serves to assert,
exercise or defend legal claims.
If
personal data is processed for direct marketing purposes,
you may object to this processing at any time by notifying
us.
After your objection has been made, we will stop processing
the data concerned for direct marketing purposes.
Last update: 22 October 2024