PRIVACY POLICY
Unless otherwise stated below, the provision of your personal data is not required by law or
by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure
to provide the data has no consequences. This applies only insofar as no other information is provided regarding the following processing operations. “Personal
"data” refers to all information relating to an identified or
identifiable natural person.
Server log files
You may visit our websites without providing any personal information.
Each time
you access our website, usage data
is transmitted to us or our web host /
IT service provider via your internet browser
, which is then stored in log data (so-called server log files). This stored data includes, for example, the name of the page
accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring
the smooth operation of our website and in improving our services.
Contact
the Data Controller
Please contact us if you wish. The data controller is: Melanie Williams, Jahnstr.
8–10, 63505 Langenselbold, Germany, 06184-93610, datenschutzbeauftragter@koi-company.de
Unsolicited contact from the customer via email
If you
contact us on your own initiative via email, we
collect your personal data (name, email address,
message text)
only to the extent you provide it. The
data processing serves to process and respond to your
enquiry. If
the contact serves to carry out pre-contractual measures (e.g.
advice regarding
purchase interest, preparation of a quotation) or relates to a
contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(
b) of the GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on
our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time,
on grounds relating to your particular situation, to the processing of your personal
data based on Article 6(1)(f) of the GDPR. We use
your email address solely for the purpose of processing your enquiry. Your data will subsequently be deleted in accordance with statutory
retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form When
you use the contact form, we collect your personal
data (name, email address, message text) only to the extent you provide
it. The purpose of data processing is to establish contact. If
the contact serves to carry out pre-contractual measures (e.g.
advice regarding
purchase interest, preparation of a quotation) or relates to a
contract already concluded between you and us, this
data processing is carried out on the basis of Article 6(1)(
b) of the GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on
our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time,
on grounds relating to your particular situation, to the processing of your personal
data based on Article 6(1)(f) of the GDPR. We use
your email address solely for the purpose of processing your enquiry. Your data will subsequently be deleted in accordance with statutory
retention periods, provided you have not consented to further processing and use.
Collection and processing of data for applications via email
Site visitors
may apply via email if they are interested in vacancies advertised on our website. In doing so
, we collect your
personal data only to the extent that you have provided it.
This includes your contact details (e.g.
name, email address,
telephone number), information regarding your professional qualifications and
education, details of professional development
, and performance-related evidence.
The
data processing serves the purpose of establishing contact and
deciding whether to enter into an employment relationship
with you. The provision of this data is necessary to carry out the application process. The processing of
your personal data
is based on Article 6(1)(b) of the GDPR in conjunction with Section 26
(1) of the BDSG for the implementation of pre-contractual
measures (completion of the application process as a preliminary step towards an employment contract).
Insofar as you have given us your consent to the processing of personal data for inclusion in our applicant pool,
e.g. by ticking a checkbox, the processing is carried out on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent
at any time by notifying us,
without this affecting the lawfulness
of the processing carried out on the basis of the
consent prior to its withdrawal.
If, as part of the application process, special categories of personal data within the meaning of Article 9(1) of the GDPR are requested from
applicants,
such as details regarding the degree of severe disability,
this is done on the basis of Article 9(2)(b)
of the GDPR so that we may exercise the rights arising from labour law and the law
on social security and social protection, and fulfil our obligations in this regard.
We will store your personal data for as long as is necessary for the decision regarding your application. Your data will
subsequently be deleted;
deleted after six months at the latest, provided you have not consented to further
processing and use.
If an employment relationship is established following the application process, the data provided will be further processed on
the basis of
Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purposes of
the performance of the employment relationship
and subsequently transferred to the personnel file.
WhatsApp Business
If you
contact us for business purposes via WhatsApp, we use
the WhatsApp Business version provided by WhatsApp Ireland Limited
(4 Grand
Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If
you are located outside the European
Economic Area,
this service is provided by WhatsApp Inc. (1601 Willow Road,
Menlo Park, CA 94025, USA).
The data processing
serves to handle and respond to your contact enquiry. For this
purpose, we collect and process your mobile phone number stored with
WhatsApp,
your name (if provided) and other data to the extent that you have
made it available. For this service, we use a mobile device whose address book contains only data from users who have contacted
us via WhatsApp. Personal data is therefore not passed on to WhatsApp unless you have already given your consent to
WhatsApp.
Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the USA.
An adequacy decision
by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has obtained TADPF
certification and is therefore committed to complying with European data protection principles. If the contact serves to carry out
pre-contractual measures (e.g. advice regarding purchase interest, preparation of a quotation) or relates to a contract already concluded between
you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on
our overriding legitimate interest in providing a quick and easy means of contact and in responding
to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on
Article 6(1)(f) of the GDPR. We will only
use your personal data to process your enquiry.
Your data will subsequently be deleted in accordance with statutory
retention periods, provided you have not consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at
https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer Account Orders
Customer Account
When
you open a customer account, we collect your personal
data to the extent specified there. The purpose of processing this data
is
to improve your shopping experience and to simplify the order
processing. Processing is carried out on the basis of
Article 6(1)
(a) of the GDPR with your consent. You may withdraw your consent
at any time by notifying us, without this affecting the
lawfulness
of the processing carried out on the basis of your consent prior to withdrawal.
Your customer account will then
be deleted.
Collection, processing and disclosure of personal data when placing orders
When
you place an order, we collect and process your personal data
only to the extent necessary to fulfil and process your order
and
to handle your enquiries. The provision of the
data is necessary for the conclusion of the contract. Failure
to provide
the data means that no contract can be concluded. The
processing is carried out on the basis of Article 6(1)(b)
of the GDPR and is necessary for the performance of a contract with you. Your data
may be passed on, for example, to shipping companies, dropshipping or fulfilment providers,
payment service providers,
order processing service providers and IT service providers. In
all cases, we strictly adhere to the legal
requirements. The scope of data transfer is kept to a minimum.
Reviews Advertising
Use of your personal data for sending postal advertising
We
use your personal data (name, address) that we have
received in
connection with the sale of goods or services to
send you postal advertising, provided you have not
objected to this use. The provision of this
data is
necessary for the conclusion of the contract. Failure to provide this data means
that no contract can be concluded.
Processing
is carried out on the basis of Article 6(1)(f) of the GDPR, based on our
overriding legitimate interest in direct marketing.
You may object to this use of your address details at any time by notifying us. You will find the contact details for exercising
your right to object in the legal notice.
Use of your email address for sending newsletters
We
use your email address, independently of the contract processing,
exclusively for our own advertising purposes to send newsletters,
provided
you have expressly consented to this. Processing is carried out on
the basis of Article 6(1)(a) of the GDPR with your consent.
You
may withdraw your consent at any time without this
affecting the lawfulness of the processing
carried out on the basis of your consent prior to withdrawal.
To do so, you may unsubscribe from the newsletter at any time by using
the relevant link in the newsletter or by
notifying us. Your email address will then be removed from the mailing list.
Use of Klaviyo
We
use the services of Klaviyo Inc. (125
Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for the dispatch of the newsletter within
the framework of data processing on our behalf.
We pass on the information you provided during newsletter registration (email address, first name and
surname if applicable) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical analysis.
To
analyse newsletter campaigns, the newsletters sent contain
a 1x1 pixel graphic (tracking pixel) or a tracking
link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any embedded links. In this
context,
we collect your personal data, such as your IP address,
browser type and device, as well as the time of access. From this
data,
usage profiles may be created under a pseudonym. The collected
data is not used to
identify you personally.
The data collected is used solely for statistical analysis to
improve newsletter campaigns.
Your data is generally transmitted to Klaviyo’s servers in the USA and stored there. An
adequacy decision
by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework
(TADPF). Klaviyo is certified under the
TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding
legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time to the processing of your personal
data on
grounds relating to your particular situation.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at
https://www.klaviyo.com/legal/data-processing-agreement.
Use of your email address for availability notifications
We
offer a stock availability notification service on our website.
Should an item be temporarily out of stock,
you
have the option to enter your email address next to
the relevant item and be notified by email by
us once it becomes available,
provided you have consented to this. You
will receive a one-off notification by
email regarding the availability of the
relevant item once it becomes available. The
processing is carried out on the basis of Article 6(1)(a) of the GDPR with
your consent. You may withdraw your consent
at any time,
without this affecting the lawfulness of the processing carried out on the basis of your consent up until
the withdrawal. You
may
unsubscribe from the availability notification at any time by notifying us.
Your email address will then be removed from the
mailing list.
Shipping provider
Disclosure of your email address to shipping companies for information on the dispatch status
We
disclose your email address to the
transport company as part of the contract processing, provided you have expressly
consented to this during
the ordering process. The disclosure serves the purpose of informing you by email about
the dispatch status. Processing
is carried out on
the basis of Article 6(1)(a) of the GDPR with your consent. You
may withdraw your consent at any time by notifying us or
the
transport company, without this affecting the lawfulness
of the
processing carried out on the basis of your consent prior to withdrawal.
Payment service provider Credit
check Use of PayPal
We
use the PayPal payment service provided by PayPal
(Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449,
Luxembourg; “PayPal”) on our website. The data processing serves the purpose of enabling us to offer you payment via this service. By
selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the
contract
with you using the selected payment method. This
processing is carried out on the basis of Article 6(1)(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find
this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We
use the PayPal Express payment service on our website, provided by
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal
L-2449,
Luxembourg; “PayPal”). The purpose of data processing is to enable us to
offer you payment via the PayPal Express payment service.
To
integrate this payment service, it is necessary for PayPal
to collect, store and analyse data (e.g. IP address, device type,
operating system,
browser type, location of your device) when you visit the website.
Cookies may also be used for this purpose. The
cookies enable your browser to be recognised.
The
use of cookies or comparable technologies takes place with your
consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with
Article 6
(1)(a) GDPR. The processing of your personal data
is carried out with your consent on the basis of Article 6(1)(
a)
of the GDPR. You may withdraw your consent at any time without this
affecting the lawfulness of the processing carried out on the basis of your
consent prior to withdrawal.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the
contract
with you using the selected payment method. This
processing is carried out on the basis of Article 6(1)(b) of the GDPR.
Further information on data processing when using the PayPal Express payment service can be found in the relevant
privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We
use the PayPal Check-Out payment service on our website, provided by
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard
Royal L-2449, Luxembourg; "PayPal"). The purpose of data processing is to
enable us to offer you payment via this payment service.
When you select and use payment via PayPal, credit card via PayPal,
direct debit via PayPal or “Pay Later” via PayPal, the
data
required for payment processing is transmitted to PayPal in order to
fulfil
the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
In this context, cookies may be stored that enable your browser to be recognised. The resulting
data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a
customer-oriented range of different payment methods. You have the right to object at any time to this processing of personal data concerning you on grounds relating to your particular
situation.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For
certain payment methods such as credit card via PayPal, direct debit via
PayPal or “Pay Later” via PayPal, PayPal reserves the
right
to obtain a credit check, where necessary, based on
mathematical and statistical methods using credit reference agencies.
For this purpose, PayPal transmits the personal data required for a credit check To this end,
PayPal transmits the personal data required for a credit check
to a credit reference agency and uses the
information
received regarding the statistical probability
of a payment default to make a balanced decision on the
establishment,
execution or termination of the contractual relationship.
The credit report may contain probability values (score values)
calculated
on the basis of scientifically recognised
mathematical and statistical methods, the calculation of which
incorporates, amongst other things
, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The
data processing
serves the purpose of a credit check for the initiation of a contract. The
processing is carried out on the basis of Article 6(
1)(f) of the GDPR, based on our overriding legitimate interest in protection against payment default where PayPal makes an advance payment.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f)
of the GDPR by notifying PayPal. The
provision
of the data is necessary for the conclusion of the contract using your preferred
payment method. Failure to provide the data will
result in the contract not being concluded using your chosen payment method.
Third-party providers
When
paying via a third-party payment method, the data required for
payment processing is transmitted to PayPal.
This
processing is carried out on the basis of Article 6(1)(b) of the GDPR. To
execute this payment method, the data may then be passed
on by
PayPal to the respective provider. This processing
is carried out on the basis of Article 6(1)(b) of the GDPR. Local
third-party providers may include, for example:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
Purchase on account via PayPal
When paying via the ‘Purchase on account’ payment method, the data required for payment processing is first transmitted to
PayPal.
To facilitate this payment method, the data is then transmitted by
PayPal to Ratepay GmbH (Franklinstraße 28-29,
10587 Berlin;
“Ratepay”) in order to fulfil the contract with you using the selected
payment method. This processing is carried out on
the basis of
Article 6(1)(b) of the GDPR. Ratepay may carry out a credit check
based on mathematical-statistical methods
(probability or score values) using credit reference agencies in accordance with the procedure described above. The
data processing
serves the purpose of a credit check for the initiation of a contract. The
processing is carried out on the basis of Article 6(
1)(f) of the GDPR, based on
our overriding legitimate interest in protection against
payment default, where Ratepay makes an advance payment.
Further information on data protection and which credit reference agencies Ratepay uses can be found at https://www.ratepay.com/legal-
payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the relevant privacy policy at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Data collection and processing when registering for instalment purchases via easyCredit
When paying by instalment via easyCredit, the supplementary data protection information regarding easyCredit’s instalment purchases applies.
Data collection and processing during credit checks
Where
we make an advance payment, e.g. for payment on account or
direct debit, we reserve the right to obtain a credit reference, where necessary
, based on mathematical and statistical methods using Creditsafe Deutschland GmbH, Sonnenallee 221 F, 12059
Berlin
. To this end, we will transfer the personal data required for a credit check
to them and use the information
received
regarding the statistical probability of
payment default to make a balanced decision regarding the
establishment,
execution or termination of the contractual relationship. The
credit check may include probability values
(score values),
which are calculated on the basis of scientifically recognised mathematical-statistical
methods and which incorporate,
amongst other things,
address data. Your legitimate interests will be taken into account in accordance with
the statutory provisions. The
data processing
serves the purpose of a credit check for the initiation of a contract. The
processing is carried out on the basis of Article 6
(1)(f) of the GDPR, based on our overriding legitimate interest in protection against payment default when we make advance payments. You have
the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f) of the
GDPR by notifying us. The provision of the
data
is necessary for the conclusion of the contract using your preferred payment method
. Failure to provide the data will result in the contract
not being concluded using your chosen payment method.
Use of Klarna payment options
We
use the payment service of Klarna Bank AB
(publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website.
By
selecting and using payment via Klarna, the data required for
payment processing is transmitted to Klarna in order to fulfil the
contract
with you using the selected payment method. This
processing is carried out on the basis of Article 6(1)(b) of the GDPR.
In doing so, cookies may be stored that enable your browser to be recognised. The resulting
data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a
customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data on grounds relating to your particular
situation.
“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (hire purchase)
For
certain payment methods such as “Pay Later” (invoice), “Pay Now” (payment
by direct debit, credit card, instant bank transfer), “Financing”
(hire purchase)
Klarna reserves the right, where necessary, to obtain a credit check based on
mathematical and statistical methods using
credit reference agencies.
To this end,
Klarna transmits the personal data required for a credit check,
such as first name and surname,
address, gender, email address, IP address, as well as data relating to the order, to a credit reference agency for the purpose of
identity
and credit checks, and uses the information received
regarding the statistical probability of
payment default
to make a balanced decision regarding the establishment, performance or
termination of the contractual relationship. The
credit report may
contain probability values (score values) calculated on the basis of
scientifically recognised mathematical
and statistical methods
and which incorporate, amongst other things, address data
into their calculation. Your legitimate interests
will be taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the
initiation of a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate
interest in protection against non-payment when Klarna provides advance payment. You have the right, for reasons arising from your
particular situation, to object at any time to the processing of your
personal data based on Article 6(1)(f) of the GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the
contract using the
payment method you have chosen. Failure to provide the data
will result in the contract not being concluded using your chosen
payment method.
Further information, in particular regarding which credit reference agencies Klarna shares your personal data with, can be found at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna is available at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in
accordance with applicable data protection regulations and as set out in Klarna’s privacy policy at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer
system. When a user visits a website, a cookie may be stored on the
user’s operating system
. This cookie contains a distinctive
string of characters that enables the browser to be uniquely identified when the website
is visited again.
Cookies
are stored on your computer. You therefore have full
control over the use of cookies. By selecting the
appropriate
technical settings in your web browser, you can be notified before
cookies are set and decide individually whether
to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that
have already been stored
can be deleted at any time. However, we would like to point out
that you may then not be able to make full use of all
the functions of this website.
The links below provide information on how to manage (including
deactivating) cookies in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-
2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary
cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable
our
systems to recognise your browser even after you have changed pages and
to offer you services. Some functions of our
website
cannot be provided without the use of cookies. For these,
it is necessary for the browser to be recognised even after a
page change.
The use of cookies or comparable technologies is based on Section 25(2) of the TDDDG. The processing of your
personal
data is based on Article 6(1)(f) of the GDPR, arising from our
overriding legitimate interest in ensuring
the
optimal functionality of the website and a user-friendly and
effective design of our service.
You have the right to object at any time to the processing of your
personal data on grounds relating to your particular situation.
Use of the Cookie Consent Manager by Shopware
We use the Cookie Consent Manager from shopware AG (Ebbinghoff 10, 48624 Schöppingen; “Shopware”) on our website.
The
tool enables you to grant consent to data processing via
the website
, in particular the setting of cookies, and to exercise your right to withdraw consent already granted. The purpose of data processing is to
obtain and document the necessary
consents to data processing
and thereby comply with legal obligations. Cookies may be
used for this purpose. In doing so, user information, including your
IP address, is collected and transmitted to Shopware. This
data is not passed on to any other third parties.
Data processing is carried out to fulfil a legal obligation on the basis of Article 6(1)(c) of the GDPR.
Further information on data protection at Shopware can be found at: https://www.shopware.com/de/datenschutz/.
Analysis Advertising tracking Communication
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street,
Dublin 4, Ireland; “Google”) on our website.
The
data processing serves the purpose of analysing this website and its
visitors, as well as for marketing and advertising purposes. To this end, Google
will,
on behalf of the operator of this website, use the information collected
to evaluate your use of the website, to compile
reports on website activity and to provide the website operator with further services
related to website and internet usage.
In doing so,
the following information, amongst others, may be collected: IP address, date
and time of page view, click path, information about
the
browser and device you are using,
pages visited, referrer URL (the website via which you accessed
our website),
location data, purchase activities. Your data may
be linked by Google with other data, such as
your search history, your personal accounts, your usage data from other devices and any other data that Google holds about
you.
The
IP address is truncated by Google within Member States of the
European Union or in other signatory states to the Agreement
on the European Economic Area.
Google
uses technologies such as cookies, browser-based web storage and
web beacons, which enable an analysis
of your use of the website.
The use of cookies or similar technologies takes place with
your consent on the basis of Section 25(1) sentence 1
TDDDG in conjunction with Article 6(1)(a) GDPR.
The
processing of your personal data takes place with your
consent on the basis of Article 6(1)(a) of the GDPR
. You may
withdraw your
consent at any time without this affecting the lawfulness
of the processing carried out on the basis of your consent prior to withdrawal.
We use the extended implementation of the
Advanced Consent Mode. In this context, even if
consent is
not given, user data is transmitted to Google in the form of
“pings”. These pings may contain, amongst other things, the following information
: IP address
to derive the IP country (the
IP address is not logged), date and time
of the page view, URL of the pages
visited, user agent, referrer URL
(website via which our website was accessed) or information
regarding the triggering of website
events such as a conversion.
Based on this information, Google models
user data in order to carry out a
comprehensive usage analysis despite the refusal of consent.
The information generated in this way regarding your use of this website is usually transmitted to a Google server
in the USA
and stored there. An adequacy decision by the
EU Commission exists for the USA, namely the Trans-Atlantic Data
Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European
data protection principles. Both Google and US government authorities have access to your data.
Further
information on terms of use and data protection can be found at
https://policies.google.com/technologies/partner-sites
and
at https://policies.google.com/privacy?hl=de&gl=de.
Use of the Meta Pixel
We
use the Meta Pixel from Meta Platforms Ireland
Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin
2, Ireland; “Meta”).
Meta
and we are joint controllers for the collection of your data that takes place when the
service is integrated and the transfer
of this
data to Meta. The basis for this is an agreement between us and
Meta regarding the joint processing of personal
data, in which the respective responsibilities are set out. The agreement is available at https://de-
de.facebook.com/legal/terms/businesstools
. Accordingly, we are specifically responsible for
fulfilling the information obligations
under Articles 13 and 14 of the GDPR, for
compliance with the security requirements of Article 32 of the GDPR with regard to
the correct technical
implementation and configuration of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, insofar as a
breach of personal data protection affects our obligations
under the joint processing agreement.
Meta is responsible for enabling data subjects to exercise their rights under Articles 15
to Articles 20 of the GDPR, to comply with the security requirements of
Article 32 of the GDPR
with regard to the security of the service, and to fulfil the
obligations under Articles 33 and 34 of the GDPR, insofar as a
breach of personal data protection affects Meta’s obligations under the joint
processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the social networks
Facebook and Instagram. To this end, Meta’s remarketing tag has been implemented on the website. This tag establishes a
direct connection to
Meta’s servers
when you visit the website. This transmits information to Meta’s servers regarding which
of our
pages you have visited. Meta associates this information with your
personal Facebook and/or Instagram user account.
When you visit the social networks Facebook or Instagram, you will then be shown
personalised, interest-based ads.
The
application also serves the purpose of generating conversion statistics.
This allows us to determine the total number of users who clicked
on
one of our adverts and were redirected to a page equipped with a
conversion tracking tag, as well as
what
actions were taken after being redirected to this website.
However, we do not receive any information that can be used to personally identify
users.
Your
data may be transferred to the USA. An
adequacy decision by the European Commission is in place for the USA:
the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained TADPF certification and is therefore committed to complying with European
data protection principles.
The
processing of your personal data takes place with your
consent on the basis of Article 6(1)(a) of the GDPR. You may
withdraw your
consent at any time without this
affecting the lawfulness
of the processing carried out on the basis of your consent prior to withdrawal.
You
You can disable the “Custom
Audiences” remarketing feature here. Further information on the collection and
use of data
by Meta, your rights in this regard and
options for protecting your privacy can be found in
Meta’s
privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising programme “Google Ads” on our website and, as part of this, conversion tracking
(visit action analysis).
Google Conversion Tracking is an analytics service provided by Google Ireland
Limited (Gordon House, Barrow
Street, Dublin 4, Ireland; Google).
If
you click on an advertisement displayed by Google, a cookie
for conversion tracking is stored on your computer. These
cookies
have a limited validity period, do not contain any personal
and therefore do not serve to identify you personally.
If
you visit certain pages on our website and the cookie has not yet
expired, Google and we can recognise that you clicked
on the
advert and were redirected to this page. Every
Google Ads customer receives a different cookie. Consequently, there is
no possibility of cookies being tracked across the websites of Ads customers.
The
information collected using the conversion cookie
is used to generate conversion statistics. This
tells
us the total number of users who clicked on one of our adverts
and were redirected to a page tagged with a
conversion tracking tag.
However, we do not receive any information
that can be used to personally identify users. We
use the advanced implementation of Advanced Consent Mode. In this case, even if consent has
not been given,
user data is transmitted to Google in the form of “pings”. These pings
may contain, amongst other things, the following information: IP address
to determine
the country of origin (the IP address is not logged),
date and time of the page view, URL of the pages
visited,
user agent, referrer URL (website via which our website was accessed
) or information about the triggering of website
events
such as a conversion. Based on this information,
Google models user data in order to carry out a
comprehensive usage analysis despite the refusal of consent.
Your
data may be transferred to the servers of Google LLC in the USA.
An adequacy decision by
the European Commission is in place for the USA,
namely the Trans-Atlantic Data Privacy Framework (TADPF). Google
has obtained TADPF certification and is therefore
committed to complying with European data protection principles.
The
use of cookies or similar technologies takes place with your
consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with
Article 6
(1)(a) GDPR. The processing of your personal data
takes place with your consent on the basis of Article 6(1)(
a)
of the GDPR. You may withdraw your consent at any time without this
affecting the lawfulness of the processing carried out on the basis of your
consent prior to withdrawal.
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/
Use of the remarketing or “similar audiences” function of Google Inc.
We
use the remarketing or “similar
audiences” function of Google Ireland Limited (Gordon House,
Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The purpose of this application is to analyse visitor behaviour and interests. To analyse website
usage,
which forms the basis for creating interest-based
advertisements, Google uses cookies.
These cookies
record visits to the website as well as anonymised data regarding
website usage. No personal data of website visitors is
stored. If you subsequently visit another website in the Google Display Network, you
will be shown advertisements that are highly likely to take into account previously viewed product
and information sections.
Your
data may be transferred to servers of Google LLC in the USA.
An adequacy decision by the EU
Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained TADPF certification and is therefore
committed to complying with European data protection principles.
The
use of cookies or similar technologies takes place with your
consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with
Article 6
(1)(a) GDPR. The processing of your personal data
takes place with your consent on the basis of Article 6(1)(
a)
GDPR. You may withdraw your consent at any time without this
affecting the lawfulness of the processing carried out on the basis of your
consent prior to withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at:
https://www.google.com/privacy/ads/
Use of Zoom
We use the video conferencing tool Zoom from Zoom Video Communications, Inc.
(55
Almaden Boulevard, San Jose, CA 95113, USA; “Zoom”) to conduct our online seminars/courses (hereinafter: online seminars) under a
data processing agreement. (55
Almaden Boulevard, San Jose, CA
95113, USA; “Zoom”).
Participation in our online seminars can take place via the Zoom app (after downloading it from the provider’s website) or via the
browser version
on the provider’s website. To participate in our
online seminars, it is therefore necessary to
visit the
provider Zoom’s website at least once. Zoom is responsible for the
processing of your data that takes place there. We
are responsible
for the
processing of your personal data in
connection with the delivery of our online seminars.
This data processing serves the purpose of delivering our online seminar, as well as preparing for and following up on it.
For this purpose, we collect and process the following personal data: name, email address, password (unless
single sign-on was used), IP address, information about the device used, date/time of the online seminar, and, in the case of
telephone dial-in,
the incoming and outgoing telephone numbers and the country. The provision
of this data is necessary for the fulfilment of the contract concluded between you
and us
regarding the provision of the online seminar.
Failure to provide this data will result in
you being unable to participate in our online seminar.
In addition, we collect and process text input made by you during the online seminar, as well as video and
audio transmissions
from your device. You can deactivate your camera and microphone before entering
the online seminar and at any time during
the online seminar. No data will then be collected in this regard. If you do not wish to provide data via the chat, camera or
audio functions,
active participation in the
online seminar or communication with other participants will
not be possible.
Insofar as
we record our online seminars for follow-up purposes, in particular for
subsequent provision to the respective participants,
you will be informed of this separately before the start of the online seminar. You can also recognise a recording by the
notification
displayed during the online seminar. During a recording, your name,
any text entered in the chat, and video/audio
transmissions from your device will be stored and, where applicable, subsequently transmitted to the respective participants of the online seminar.
The data collected during the conduct of our online seminars is transferred to Zoom under the data processing agreement and
thus
to the USA. An adequacy decision
by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy
Framework
(TADPF). Zoom has obtained certification under the TADPF and is therefore
obliged to comply with European data protection principles.
The
processing is carried out on the basis of Article 6(1)(b) of the GDPR and
is necessary for the performance of a contract with you.
Further information on data processing when using Zoom can be found at: https://zoom.us/de-de/privacy.html
We use the Matomo analytics tool from InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand; “Matomo”) on our website. The data processing serves the purpose of analysing this website and its visitors. In doing so, the following information, amongst other things, may be collected : (anonymised) IP address, information about the browser you are using and the device (device), files you have clicked on or downloaded, clicks on links to third-party websites, referrer URL (the website via which you accessed our website), URL of our website, number of your visits, time of your first visit, date and time of the visit, time zone, location data. Usage profiles may be created from this data under a pseudonym. The data collected using Matomo technologies is not used to personally identify visitors to this website and is not combined with personal data relating to the holder of the pseudonym. No cookies are used for this purpose
. Data collection is carried out via privacy-friendly fingerprinting, whereby the visitor ID is renewed after a maximum of 24 hours.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in the needs-based and targeted design of the website. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you. The use of Matomo and the associated data collection and storage can be deactivated at any time with effect for the future:
Further information on data protection at Matomo is available at https://matomo.org/matomo-cloud-privacy-policy/ and https://matomo.org/gdpr-analytics/ .
Plug-ins and other
features Use of Google Tag Manager
We
use Google Tag Manager from Google Ireland
Limited (Gordon House, Barrow Street, Dublin 4, Ireland;
“Google”) on our website.
This
application manages JavaScript tags and HTML tags, which
are used in particular to implement tracking and analysis
tools.
The Data processing serves the purpose of
tailoring our website to user needs and optimising it.
The
Google Tag Manager itself does not store cookies, nor does it
process personal data. However, it enables the
triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Use of Google reCAPTCHA
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland;
“Google”) on our website as part of a data processing agreement. The query serves the purpose of distinguishing between input by a
human and automated, machine-based processing. To this end, your input is transmitted to Google and processed there.
In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and, where applicable, also transmitted to servers of Google LLC in the
USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework
(TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 of the TDDDG in conjunction with
Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
Use of Cloudflare Turnstile
We use Cloudflare Turnstile (hereinafter “Turnstile”) on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).
Turnstile is used to verify whether data entry on this website (e.g. in a contact form) is carried out by a human or by an automated programme. To this end, Turnstile analyses the behaviour of the website visitor based on various characteristics.
This analysis begins automatically as soon as the website visitor enters a website with Turnstile enabled. For the analysis, Turnstile evaluates various pieces of information (e.g. IP address, the length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare.
The storage and analysis of the data is carried out on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from spam. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.
Further information on Cloudflare Turnstile can be found in the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US designed to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider via the following link: https://www.dataprivacyframework.gov/participant/5666.
Use of Google Maps
We
use the function for embedding
Google Maps from Google Ireland Limited (Gordon House, Barrow
Street, Dublin 4, Ireland, “Google”) on our website.
This
function enables the visual display of geographical
information and interactive maps. In
doing so, Google
collects, processes and
uses data from visitors to the websites
when pages containing Google Maps are accessed.
Your
data may also be transferred to the USA in the process. For the
USA, an adequacy decision by the European Commission is
in place, namely the
Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained
TADPF certification and is therefore committed to complying with
European data protection principles.
The
use of cookies or similar technologies takes place with your
consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with
Article 6
(1)(a) GDPR. The processing of your personal data
takes place with your consent on the basis of Article 6(1)(
a)
GDPR. You may withdraw your consent at any time without this affecting the
lawfulness of the processing carried out on the basis of your
consent prior to withdrawal.
Further information on the collection and use of data by Google can be found in Google’s privacy policy at
https://www.google.com/privacypolicy.html.
There, in the Privacy Centre, you also have the option to
change your settings so
that you can manage and protect your data processed by Google.
Use of YouTube
We
use the function for embedding
YouTube videos provided by Google Ireland Limited (Gordon House, Barrow
Street,
Dublin 4, Ireland; “YouTube”). YouTube is an affiliate of Google LLC (1600
Amphitheatre Parkway, Mountain View, CA 94043, USA;
“Google”).
The
feature displays videos stored on YouTube in an iFrame on the
website. The “Enhanced Privacy Mode”
option is activated.
As a result, YouTube does not store any information about visitors to the
website. Only when you watch a
video is information about it transmitted to YouTube and stored there. Your data may be transferred to the
USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework
(TADPF). YouTube has obtained TADPF certification and is therefore committed to complying with European data protection principles.
The
use of cookies or similar technologies takes place with your
consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with
Article 6
(1)(a) GDPR. The processing of your personal data
takes place with your consent on the basis of Article 6(1)
(a)
GDPR. You may withdraw your consent at any time without this
affecting the lawfulness of the processing carried out on the basis of your
consent prior to withdrawal.
Further
information on the collection and use of data by YouTube and
Google, your rights in this regard and options
for protecting your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy
.
Inclusion of the Händlerbund member logo
The Händlerbund member logo (Händlerbund e.V.,
Kohlgartenstraße 11–13, 04315 Leipzig). When
you visit
our website, the browser used on your device
automatically sends information to the Händlerbund
e.V. server. This information is temporarily stored in a so-called server log file for 7 days. The following
information is collected without any action on your part and stored until it is automatically deleted:
IP address of the requesting computer,
date and time of access,
name and URL of the file accessed,
website from which access is made (referrer URL), browser
used and, where applicable, your computer’s operating system, as well as the name of your internet service provider.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. For this purpose
the
IP address must remain stored for the duration of the session. The
storage in log files is carried out to ensure the functionality of
the website. Furthermore, the data serves to optimise the website and to ensure the security of the
IT systems. This data is not stored together with other personal data.
The legal basis for data processing is Article 6(1)(f) of the GDPR.
Data subject rights and storage
period Duration of storage
After
full contract fulfilment, the data is initially stored for the
duration of the warranty period, and thereafter in accordance
with statutory,
in particular tax and commercial law retention periods,
and then deleted upon expiry of the period, provided you have not
consented to further processing and use.
Rights of the data subject
You
are entitled to the following rights
under Articles 15 to 20 of the GDPR, provided the legal requirements are met: the right of access, the right to
rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(
1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Under
Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority
if you believe
that the processing
of your personal data is not lawful. You may
lodge a complaint, amongst others, with the supervisory authority responsible for us
supervisory authority, which you can contact using
the following details:
Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
Email: poststelle@datenschutz.hessen.de
Right
to object
If
the processing of personal data listed here is based
on our legitimate interest pursuant to Article 6(1)(
f)
of the GDPR, you have the right, for reasons arising from your particular
situation, to object to such processing at any time with effect
for the future.
Once
an objection has been lodged, the processing of the data in question
will cease, unless we can demonstrate compelling legitimate grounds
for
the processing which override your interests, rights and
freedoms, or where the processing serves to establish,
exercise or defend legal claims.
If
the processing of personal data is carried out for the purposes of direct marketing,
you may object to this processing at any time by notifying
us.
Once an objection has been lodged, we will cease processing
the data in question for the purposes of direct marketing.
Last updated: 22 October 2024