Privacy Policy
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data here means all data by which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is 7strength GmbH, Senator-Braun-Allee 9, 31135 Hildesheim, Germany, Tel.: +49 3221 2292585, E-Mail: shop@7strength.com The entity responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data collection when visiting our website
2.1 When using our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the site
- Browser used
- Operating system used
- Used IP address (if applicable: in anonymized form)
Data processing is carried out according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used otherwise. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.
3) Hosting and Content Delivery Network
Cloudflare
We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website according to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
4) Cookies
To make your visit to our website attractive and to enable the use of certain features, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the duration of storage in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies implemented by us, the processing is carried out either in accordance with Art. 6 para. 1 lit. b DSGVO for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of given consent, or in accordance with Art. 6 para. 1 lit. f DSGVO to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting us
5.1 Zendesk
This website uses a live chat system from the following provider: Zendesk Inc., 1019 Market St, San Francisco, USA
The processing of personal data transmitted within the chat is carried out either in accordance with Art. 6 para. 1 lit. b DSGVO, insofar as this is necessary for the initiation or performance of the contract, or in accordance with Art. 6 para. 1 lit. f DSGVO due to our legitimate interest in the effective support of our site visitors. Unless legal retention obligations oppose, your transmitted data will be deleted after the final clarification of the respective matter. In addition, further information can be collected and evaluated by means of cookies to create pseudonymized usage profiles.
However, this information is not used to personally identify you and is not merged with other data sets. If this information contains personal references, the processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The setting of cookies can be prevented by appropriate browser settings. However, in this case, the functionality of our website may be limited. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.
We have concluded a contract for order processing with the provider, which ensures the protection of the data of our site visitors and prevents unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
5.2 Trusted Shops
For the review reminder, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Köln
We transmit your email address and, if applicable, other customer data exclusively on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO to the provider so that they can contact you by email with a review reminder.
You can revoke your consent at any time with effect for the future towards us or the provider.
We have concluded a contract for order processing with the provider, which ensures the protection of the data of our site visitors and prevents unauthorized disclosure to third parties.
5.3 Zendesk
For processing customer inquiries, we use the email ticket system of the following provider: Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland
If you submit contact inquiries via email through our website, these are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can view the current status of your inquiry at any time via the individually assigned ticket number.
For the organization and processing of inquiries, personal data is collected according to the extent of its provision, but at least name, first name, and email address, transmitted to the provider, stored, and processed there.
The legal basis for processing this data is our legitimate interest in the efficient design of our customer service, the fastest possible response to your inquiry, and the optimization of our service offering according to Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prevents unauthorized disclosure to third parties.
5.4 - Own form for price proposals
On our website, we offer customers the opportunity to submit a price proposal for selected items they wish to purchase via an electronic form. According to Art. 6 para. 1 lit. b GDPR, we collect and store certain personal data of the requester (such as name and email address) during the electronic transmission of the form for processing the price proposal and use this data to subsequently inform the requester about a rejection or acceptance of the offer or to make a counterproposal. The data provided via the form is used strictly for the purpose of collecting and assigning the price proposal and for deciding on its acceptance with regard to a possible preparation of a contract conclusion. After the final processing of a price proposal request, the personal data is deleted unless legal retention obligations prevent this.
- Make an Offer
On this website, you can use the "Make an Offer" service of Buraleo Limited, Suite 2, Ground Floor Orchard Brae House, Edinburgh, Eh4 2hs, United Kingdom ("Make an Offer"), to submit price proposals for items for sale.
In this process, the user's name, email address, if applicable phone number, and delivery address are requested and, in the event of submitting the price proposal, initially transmitted to Make an Offer and subsequently to the aforementioned responsible party, who enables them to respond to the price proposal, i.e. to accept, reject, or make a counteroffer.
Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. It is only carried out to the extent necessary for the purpose of contract initiation and processing. After the final processing of an offer request, your data will be deleted, provided that no legal retention periods prevent this.
If data is transferred to Buraleo Limited in the United Kingdom, the adequate level of data protection is ensured by an adequacy decision of the European Commission.
Further information on the privacy policy of "Make an Offer" can be found at https://makeofferapp.herokuapp.com/static/private_policy.
5.5 As part of your contact with us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.
The legal basis for data processing is our legitimate interest in responding to your request according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request; this is the case if the circumstances indicate that the matter concerned has been conclusively clarified and provided that no legal retention obligations prevent this.
6) Data processing when opening a customer account and for contract processing
According to Art. According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide us with this data when opening a customer account. The data required for opening the account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded have been fully settled, no legal retention periods prevent this, and there is no legitimate interest on our part in further storage.
7) Comment function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you chose are stored and published on the website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your e-mail address to contact you if a third party objects to your published content as illegal. Legal bases for storing your data are Art. 6 para. 1 lit. b and f DSGVO. We reserve the right to delete comments if they are objected to as illegal by third parties.
8) Use of customer data for direct advertising
8.1 Subscribe to our e-mail newsletter
When you sign up for our e-mail newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have explicitly confirmed that you consent to receiving the newsletter. We then send you a confirmation e-mail asking you to confirm by clicking on a corresponding link that you want to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When registering for the newsletter, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the responsible party named at the beginning. After successful deregistration, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.
8.2 Sending the newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, like those already purchased, by email. For this, we do not need to obtain separate consent from you according to § 7 para. 3 UWG. The data processing is therefore solely based on our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, no emails will be sent by us. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the responsible party named at the beginning. Only transmission costs according to the basic tariffs will be charged to you for this. After receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
8.3 [ua]
The sending of our email newsletters is carried out via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider pursuant to Art. 6 para. 1 lit. f GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical analysis of the success of newsletter campaigns by using web beacons or tracking pixels in the sent emails, with which open rates and specific interactions with the newsletter content can be measured. Device information (e.g., time of page access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and excludes transfer to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
9) Data processing for order processing
9.1 Insofar as this is necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b DSGVO.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided when ordering (name, address, email address) to inform you personally by suitable means of communication (e.g., by post or email) about upcoming updates within the legally prescribed period as part of our legal information obligation pursuant to Art. 6 (1) lit. c DSGVO. Your contact data will be used exclusively for the purpose of informing you about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers in accordance with the following information.
9.2 Transfer of personal data to shipping service providers
-DHL
We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We pass on your email address and/or phone number to the provider before the delivery of the goods in accordance with Art. 6 para. 1 lit. a DSGVO for the purpose of coordinating a delivery date or for delivery notification, provided you have expressly given your consent for this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO, we only pass on the recipient's name and delivery address to the provider. The transfer only takes place insofar as it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
Consent can be revoked at any time with effect for the future towards the above-mentioned controller or the provider.
9.3 Use of payment service providers
-Amazon Pay
On this website, online payment methods from the following provider are available: Amazon Payments Europe sca, 38 avenue John F. Kennedy, L-1855 Luxembourg
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
Apple Pay
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay." Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, it is therefore necessary to enter a code you previously set and verify it using the "Face ID" or "Touch ID" function of your device.
For the purpose of payment processing, the data you provide during the ordering process along with information about your order is transmitted encrypted to Apple. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store this information in a way that could identify you. You can disable the use of Apple Pay on your Mac in the iPhone settings. To do this, go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".
Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/en-gb/HT203027
- giropay
On this website, online payment methods from the following provider are available to you: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Klarna
On this website, online payment methods from the following provider are available to you: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider, with which the provider advances payment (such as purchase on account or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable data on alternative payment methods) during the ordering process.
To protect our legitimate interest in determining the creditworthiness of our customers, this data is passed on by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment behavior), whether the payment method you have chosen can be granted with regard to payment and/or default risks.
In addition to internal provider criteria, identity and credit information from the following credit agencies may also be included in the decision-making process within the scope of the application review in accordance with Art. 6 para. 1 lit. f GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The creditworthiness report may contain probability values (so-called score values). As far as score values are included in the result of the creditworthiness report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.
- Mollie
On this website, online payment methods from the following provider are available to you: Mollie BV, Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Paypal
On this website, online payment methods from the following providers are available to you: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider where you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider, with which the provider advances payment, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable data on alternative payment methods) during the ordering process.
To protect our legitimate interest in determining the creditworthiness of our customers, this data is passed on by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment behavior), whether the payment method you have chosen can be granted with regard to payment and/or default risks.
The creditworthiness report may contain probability values (so-called score values). As far as score values are included in the result of the creditworthiness report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.
- Paypal purchase processing
On this website, online payment methods from the following providers are available to you: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- SOFORT
On this website, online payment methods from the following provider are available to you: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
10) Online marketing
10.1 Google AdSense
This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). Google AdSense uses so-called cookies, text files that are stored on your computer and allow an analysis of your use of the website. In addition, Google AdSense also uses so-called web beacons (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC in the USA.
Google uses the information obtained in this way to evaluate your use of this website with regard to AdSense ads. The IP address transmitted by your browser within the framework of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties if required by law and/or to the extent that third parties process this data on behalf of Google.
All processing described above, especially reading information on the used device, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your site visit.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
Further information on Google's privacy policy can be found at: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in
10.2 ADCELL Partner Program
We participate in the partner program of the following provider: ADCELL" Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany
In this context, we have placed links on our website that lead to offers on the provider's or third parties' websites ("Affiliate Sites").
To measure the success of an affiliate link, analyze the orders generated through it, and the corresponding settlement of commission payments, the provider uses cookies and/or similar technologies that are generally set on the affiliate sites and for which we are not responsible under data protection law. In doing so, the provider regularly processes the IP address as well as possibly other device information.
All processing described above, especially reading or storing information on your used device, only takes place if you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management on the partner sites.
10.3 AWIN Performance Advertising Network
We participate in the partner program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany
In this context, we have placed links on our website that lead to offers on the provider's or third parties' websites ("Affiliate Sites").
To measure the success of an affiliate link, analyze the orders generated through it, and the corresponding settlement of commission payments, the provider uses cookies and/or similar technologies that are generally set on the affiliate sites and for which we are not responsible under data protection law. In doing so, the provider regularly processes the IP address as well as possibly other device information.
All processing described above, especially reading or storing information on your used device, only takes place if you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management on the partner sites.
10.4 Sober
For our voucher offers, we use the services of the following provider: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe
The provider operates a voucher network through which participating partner shops can create vouchers and distribute them to their customers. For this purpose, your data required for issuing your voucher is encrypted by us and forwarded to the provider. The data is only forwarded to the provider after you have completed your purchase and clicked on the voucher banner. The transfer of this data serves exclusively to pre-fill the fields for voucher issuance.
The described data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the advertising approach to you by advertising third parties, from whose benefits you can profit by redeeming the vouchers.
11) Web analytics services
11.1 Google Analytics 4
This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can analyze the use of websites.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files stored on your device that enable an analysis of your use of the website. The information collected through cookies about your use of this website (including the IP address transmitted from your device, truncated by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also involve the transfer of information to the servers of Google LLC, based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted from your device during website use is always collected and processed only in an anonymized form by default, so that a direct personal reference of the collected information is excluded. This automatic anonymization occurs by Google truncating the IP address transmitted from your device within member states of the European Union (EU) or in other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports about your website activities or usage behavior, and to provide us with other services related to your website and internet usage. The truncated IP address transmitted from your device within the scope of Google Analytics is not combined with other Google data in this context. The data collected through the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables, through a special feature called "demographic characteristics," the creation of statistics with information about the age, gender, and interests of website users based on an analysis of interest-based advertising and including third-party information. This makes it possible to identify and differentiate groups of website users in order to target marketing measures effectively. However, data collected via the "demographic characteristics" feature cannot be assigned to any specific person and thus not to you personally. The data collected through the "demographic characteristics" feature is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for storing and reading information on the device you use to access the website, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a DSGVO. Without your consent, the use of Google Analytics during your use of the website will not take place. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie-Consent-Tool" provided on the website.
On this website, the "Google Signals" service can also be used as an extension of Google Analytics 4. With Google Signals, cross-device reports can be created by Google (so-called "Cross-Device Tracking"). If you have enabled "personalized advertising" in your Google account settings and linked your internet-enabled devices to your Google account, Google can analyze user behavior across devices and create database models based on this, provided you have consented to the use of Google Analytics according to Art. 6 para. 1 lit. a DSGVO (see above). This includes the logins and device types of all site visitors who were logged into a Google account and completed a conversion. The data can show, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. As far as Google Signals is used, we do not receive any personal data from Google, but only statistics created based on Google Signals. You have the option to deactivate the "personalized advertising" function in your Google account settings and thus disable cross-device analysis. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information can be found here: https://support.google.com/analytics/answer/7532985?hl=de
As an extension of Google Analytics 4, the "UserIDs" feature can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "Cross-Device-Tracking"). This allows your usage behavior to be analyzed across devices if you have given consent for the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, have registered a personal account on this website, and are logged into your personal account on various devices with your corresponding login data. Among other things, the data collected in this way can reveal on which device you first clicked on an ad and on which device the corresponding conversion took place.
We have concluded a so-called data processing agreement with Google for the use of Google Analytics 4, which obliges Google to protect the data of the users of our website and not to pass it on to third parties.
To ensure compliance with the European data protection level even in the event of any data transfer from the EU or EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information about Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=en
Details about the processing triggered by Google Analytics 4 and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
11.2 Cloudflare Web Analytics
This website uses the web analytics service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
The service collects and stores pseudonymized visitor data using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms to read device and browser information), including information about the device used such as IP address and browser information, to evaluate these for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. This enables, among other things, the analysis of movement patterns (so-called heatmaps), which represent the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Due to pseudonymization, direct personal reference is generally excluded. Your personal data will not be merged with data collected elsewhere.
All processing described above, especially reading or storing information on the device used, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
11.3 This website uses the "Google Tag Manager", a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides the technical basis to bundle various web applications including tracking and analysis services and to calibrate, control, and condition them via a unified user interface.
Google Tag Manager itself does not store any information on users' devices nor does it read any. The service also does not perform independent data analyses.
However, the Google Tag Manager transmits your IP address to Google when the page is accessed and may store it there. Transmission to servers of Google LLC in the USA is also possible.
All processing described above, especially reading or storing information on the device used, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
12) Retargeting/ Remarketing/ Referral Advertising
12.1 Facebook Pixel for creating custom audiences with advanced matching function (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in advanced matching mode, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Facebook").
If a user who has given their explicit consent clicks on an advertisement placed by us and displayed on Facebook, the URL of our linked page is supplemented by the Facebook Pixel. This URL parameter is then entered into the user's browser via a cookie after redirection, which is set by our linked page itself. In addition, specific customer information is collected via this cookie, such as the email address that we collect on our Facebook-connected website during transactions like purchases, account logins, or registrations (advanced matching). The cookie is then read by the Facebook Pixel and enables the forwarding of data, including specific customer data, to Facebook.
With the help of the Facebook Pixel with advanced matching, Facebook can determine the visitors of our online offer as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, the Facebook Ads we place are only shown to Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g., interests in specific topics or products determined by the visited websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear intrusive. This allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad ("conversion"). Compared to the standard version of the Facebook Pixel, the advanced matching function helps us better measure the effectiveness of our advertising campaigns by capturing more related conversions.
All transmitted data is stored and processed by Facebook to enable a connection to the respective user profile and to give Facebook the opportunity to use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
This processing is based on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.
Consent to the use of the Facebook Pixel may only be given by users who are older than 13 years. If you are younger, please ask your parents or guardians for permission.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the checkmark next to the "Facebook Pixel" setting in the "Cookie-Consent-Tool" embedded on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
12.2 idealo Performance Tracking
This website uses the tracking technology of Ingenious Technologies AG, Französische Straße 48, 10117 Berlin ("Ingenious"), to establish a connection between clicking on an advertising medium or the display of an advertising medium (touchpoint) and an action performed by you (e.g., a purchase in an online shop or newsletter registration). For each touchpoint, your browser sends an HTTP request to the Ingenious server, which in turn transmits certain information.
This information includes the URL of the webpage where the advertisement is displayed (referrer URL), the browser identification (user agent) of the device (including information about device type and operating system), the IP address of the device (this IP address is anonymized by Ingenious before storage), HTTP headers (data packets automatically transmitted by your browser containing various technical information), the time of the request, and, if already stored on the device, the cookie with its full content.
A cookie is a small data packet exchanged between your browser and the server. This data packet can store and transmit information relevant to the web application, such as the contents of a virtual shopping cart.
Tracking technology places cookies on your device to document actions. The cookie stores information about the most recently used touchpoints (i.e., when an advertising medium was displayed or clicked on by a device). The cookie also contains a cookie ID generated by Ingenious. Using the cookie ID, Ingenious stores data about the used touchpoints and information about your activities. The recorded touchpoints can be combined into a user journey if needed.
In the event of an action request, the order number and the shopping cart value of your order are usually transmitted and stored by Ingenious. In addition, the following data may be transmitted and stored: your customer number, new customer characteristics, your age and gender, as well as your information provided in the context of a customer survey.
The information transmitted to Ingenious and the cookies serve exclusively to correctly assign the success of an advertising medium to the corresponding billing.
All the above-described processing, especially reading information on the used end device via the tracking pixel, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, idealo Performance Tracking will not be used during your website visit.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
The collection and processing of tracking data can also be prevented by calling the tracking opt-out page mentioned below:
https://marketing.net.idealo-partner.com/ts/i5040718/tsv?settrackingoptout
When the tracking opt-out page is called, a special cookie is written that disables tracking in the respective web browser of the end device. However, as soon as you delete the tracking opt-out cookie, tracking will be reactivated.
Below we inform you about which cookies our tracking technology uses:
With every display of an advertising medium, a cookie named "tsv" is set. This cookie contains a cookie ID as well as a list of data from the last view touchpoints, consisting of time, referrer URL, and the Admedia code (unique identifier of an advertising medium containing information about sales channel, publisher, publisher website, and advertising medium).
The cookie named "tsc" is set with every click on an advertising medium. This cookie contains a cookie ID, a list of data from the last click touchpoints, consisting of time, referrer URL, page ID in the customer's shop system, and the Admedia code (unique identifier of an advertising medium containing information about sales channel, publisher, publisher website, and advertising medium).
The cookie named "trackingoptout" is written when the opt-out link is clicked to disable tracking for the current web browser of this device.
12.3 Google Ads Remarketing
This website uses the online advertising program "Google Ads" and within the framework of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine the success of individual advertising measures in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize whether the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with conversion tracking. However, they do not receive any information that would allow users to be personally identified. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Conversion Tracking during your visit to the website will not take place.
You can permanently disable the setting of cookies by Google Ads Conversion Tracking for ad settings. To do this, you can download and install the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Please note that certain functions of this website may not be available or only available to a limited extent if you have disabled the use of cookies.
Further information on Google's privacy policies can be found at:
https://www.google.com/policies/technologies/ads/
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
12.4 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This allows us to specifically address visitors to our website with personalized, interest-based advertising who have already shown interest in our shop and products. The display of advertising media is based on a cookie-based analysis of past and current user behavior; no personal data is stored. In retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertising individually to the stored information. These cookies are small text files stored on your computer or mobile device. This way, you are shown advertising that is highly likely to correspond to your product and information interests.
All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, no retargeting technology is used during your visit to the website.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
12,5 billiger.de Sales Tracking
This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany
If you have reached our website via an advertisement on the provider's domain, the success of the advertisement can be recorded using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, possibly including your IP address, is read out via tracking technology to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This allows us to create statistics about user behavior on our website after the redirection of an advertisement, which we use to optimize our offer.
All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.
12.6 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and within the framework of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine the success of individual advertising measures in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with conversion tracking. However, they do not receive any information that would allow users to be personally identified.
In the context of using Google Ads, there may also be a transmission of personal data to the servers of Google LLC in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.
All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link from Google:
https://www.google.com/settings/ads/plugin?hl=en
To address users whose data we have received in the context of business or business-like relationships in a more interest-appropriate advertising manner, we use a customer matching function within Google Ads. For this purpose, we electronically transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) to Google. Google does not have access to clear data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts of the affected persons. In this way, personalized advertising can be displayed across all Google services linked to the respective Google account.
Customer data is only transmitted to Google if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in connection with the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
You can view Google's privacy policy here: https://policies.google.com/privacy
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
12.7 Kelkoo Sales Tracking
This website uses the conversion tracking technology of the following provider: Kelkoo Group, Parc Sud Galaxie, 6 rue des Méridiens, 38130 Échirolles, France
If you have reached our website via an advertisement on the provider's domain, the success of the advertisement can be recorded using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, possibly including your IP address, is read out via tracking technology to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This allows us to create statistics about user behavior on our website after the redirection of an advertisement, which we use to optimize our offer.
All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.
12.8 Microsoft Advertising Universal Event Tracking
This website uses the conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
If you have reached our website via an advertisement on the provider's domain, the success of the advertisement can be recorded using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, possibly including your IP address, is read out via tracking technology to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This allows us to create statistics about user behavior on our website after the redirection of an advertisement, which we use to optimize our offer.
All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
12.9 shopping24 Conversion Tracking
This website uses the conversion tracking technology of the following provider: shopping24 Gesellschaft für multimediale Anwendungen mbH, Poßmoorweg 2
22301 Hamburg, Germany
If you have reached our website via an advertisement on the provider's domain, the success of the advertisement can be recorded using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, possibly including your IP address, is read out via tracking technology to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This allows us to create statistics about user behavior on our website after the redirection of an advertisement, which we use to optimize our offer.
All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.
13) Site functionalities
13.1 Sign in with Amazon
On our website, we provide a single sign-on function from the following provider: Amazon EU S.arl, 38 Avenue John F. Kennedy, L-1855, Luxembourg
In addition to data transmission to the provider location mentioned above, data transmissions may also be made to: Amazon.com Inc, USA
If you have an account with the provider, you can create a user account or register on our website using these account data.
When you visit this page, a direct connection between your browser and the provider's servers can be established via this login function, even if you do not have an account with the provider or are not currently logged in. The provider thereby receives the information that you have visited our page. The information collected in this process (including your IP address, if applicable) is transmitted directly from your browser to a server of the provider and stored there. However, the information is not used to personally identify you and is not passed on to third parties.
These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence.
If you log in on the provider's website by clicking the registration button with your account data, the provider transmits the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender) to us based on your explicit consent according to Art. 6 para. 1 lit. a GDPR.
We store and use the data transmitted by the provider to set up a user account with the required data (salutation, first name, last name, address data, country, email address, date of birth), provided you have authorized the provider to do so. Conversely, data (e.g., information about your surfing or purchasing behavior) can be transferred by us to your account with the provider based on your consent.
The given consent can be revoked at any time with effect for the future towards us.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
13.2 EHI Test Seal Widget
To display external customer reviews and/or externally awarded quality seals, graphic elements of the following provider are embedded on our website: EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne
When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the optimal marketing of our offer and the appealing design of our website.
13.3 Trustami Trust Seal
To display external customer reviews and/or externally awarded quality seals, graphic elements of the following provider are embedded on our website: Trustami GmbH, Schröderstraße 5, 10115 Berlin
When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the optimal marketing of our offer and the appealing design of our website.
13.4 Trusted Shops Trustbadge
To display external customer reviews and/or externally awarded quality seals, graphic elements of the following provider are embedded on our website: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne
When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.
If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the optimal marketing of our offer and the appealing design of our website.
13.5 reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts", i.e., fonts loaded from the internet by Google. No further information is processed except the aforementioned, which is already transmitted to Google via the functionality of ReCaptcha.
The service checks whether an input is made by a natural person or abusively by machine and automated processing with the aim of blocking spam, DDoS attacks, and similar automated harmful attacks. To ensure that an action is performed by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device used, the browser's recognition data, the operating system type, as well as the date and duration of the visit and transmits this data for evaluation to the provider's servers.
The basis of this procedure is our legitimate interest in determining individual personal responsibility when using the internet and in preventing abuse and spam in accordance with Art. 6 para. 1 lit. f DSGVO.
We have concluded a contract for order processing with the provider, which ensures the protection of the data of our site visitors and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
14) Tools and Miscellaneous
14.1 This website uses a so-called "Cookie-Consent-Tool" to obtain effective user consents for cookies requiring consent and cookie-based applications. The "Cookie-Consent-Tool" is displayed to users when the page is loaded in the form of an interactive user interface, where consents for certain cookies and/or cookie-based applications can be granted by ticking checkboxes. Using the tool, all cookies/services requiring consent are only loaded if the respective user has given the corresponding consent by ticking checkboxes. This ensures that such cookies are only set on the user's respective device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done on the basis of Art. 6 para. 1 lit. The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our internet presence.
Another legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
14.2 [ua]
For security reasons, this website uses the service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
The provider protects the website and the associated IT infrastructure from unauthorized access by third parties, cyberattacks, as well as viruses and malware. The provider collects the IP addresses of users and, if applicable, further data about their behavior on our website (in particular accessed URLs and header information) in order to detect and prevent unauthorized page accesses and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, the provider can automatically block access to the website. The information collected in this way is transmitted to a server of the provider and stored there.
The described data processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interests in protecting the website from harmful cyberattacks and maintaining the structure and data integrity and security.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prevents unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
14.3 FINDOLOGIC
This website uses the search technology service of the following provider: FINDOLOGIC GmbH, Jakob-Haringer-Straße 5a, 5020 Salzburg, Austria
To provide the search function for articles via the search field as well as for navigation and filtering, the provider collects and stores certain user information (such as the user or session ID) in anonymized form.
If personal data is also processed in this context, the processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in providing a fault-tolerant article search and thus in optimal marketing of our offer.
15) Rights of the data subject
15.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:
- Right to access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
15.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS WITHIN THE SCOPE OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA USED FOR DIRECT MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
16) Duration of storage of personal data
The duration of storage of personal data depends on the respective legal basis, the purpose of processing, and—if applicable—the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data based on an explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws their consent.
If there are statutory retention periods for data processed under legal or similar obligations based on Art. This data will be routinely deleted in accordance with Art. 6 para. 1 lit. b GDPR after the expiration of the storage periods, provided it is no longer necessary for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.
When processing personal data based on Art. This data will be stored in accordance with Art. 6 para. 1 lit. f GDPR until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct advertising based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 2 GDPR.
Unless otherwise specified in this declaration regarding special processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.