Privacy policy
Privacy Policy
Unless specified otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data, and not providing it will have no consequences. This only applies as long as no other statement is made in the subsequent processing activities. "Personal data" refers to any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing personal information. Each time you access our website, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log files (server log files). This stored data includes the name of the page accessed, date and time of access, IP address, the amount of data transferred, and the requesting provider. The processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in ensuring the uninterrupted operation of our website and to improve our services. Your data is also transferred to Canada, among other countries. An adequacy decision by the EU Commission is in place for data transfers to Canada.
Contact Controller
The controller responsible for data processing is HB E-Commerce Rechtsanwaltsgesellschaft GmbH, Torgauer Straße 233, 04347 Leipzig, Germany, email: prime6brands@datenschutz.hb-ecommerce.eu
Proactive Contact by Customer via Email If you contact us proactively by email, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing is intended to process and respond to your contact request. If the contact is for carrying out pre-contractual measures (e.g., consultation in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We will only use your email address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.
Collection and Processing using the Contact Form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide it. The data processing serves the purpose of making contact. If the contact is for carrying out pre-contractual measures (e.g., consultation regarding an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out based on Article 6(1)(b) GDPR. If contact is made for other reasons, this data processing is carried out based on Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Orders Collection, Processing, and Disclosure of Personal Data for Orders When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of a contract. Failure to provide the data means that no contract can be concluded. The processing is carried out based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is kept to a minimum. Your data will be transferred to Canada, among other countries. The EU Commission has issued an adequacy decision for data transfers to Canada. Ratings Advertising Data Collection when Writing a Comment or Rating When you comment on or rate an article or a post, we only collect your personal data (name, email address, comment text) to the extent you provide. The processing serves the purpose of enabling a comment or rating and displaying comments/ratings. By submitting the comment/rating, you consent to the processing of the transmitted data. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted. When your comment or rating is published, only the name you provide will be published. Use of the Email Address for Sending Newsletters We use your email address independently of contract processing exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing takes place based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Use of the Email Address for Sending Direct Advertising We use your email address, which we have received as part of the sale of goods or services, for the electronic sending of advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out based on Article 6(1)(f) GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising your objection in the legal notice. You can also use the link provided in the advertising email for this purpose. This will not incur any costs other than the transmission costs according to the basic rates.
Inventory Management Use of an External Inventory Management System
We use an inventory management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be transmitted to: Billbee GmbH, Arolser Str. 10, 34477 Twistetal The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out based on Article 6(1)(b) GDPR. Payment Service Provider and Credit Information Use of Klarna Payment Options We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR. Cookies may be stored that enable your browser to be recognized. The resulting data processing takes place on the basis of Article 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of different payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation. "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase) For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase), Klarna reserves the right to obtain credit information based on mathematical-statistical procedures using credit agencies. For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated based on scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out based on Article 6(1)(f) GDPR out of our overriding legitimate interest in protection against payment default if Klarna makes advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected. Further information, in particular to which credit agencies Klarna passes on your personal data, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy. Use of SOFORT We use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The purpose of data processing is to be able to offer you various payment methods by processing payments via the payment service provider SOFORT. If you have opted for the payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Article 6(1)(b) GDPR. You can find more information on data processing when using the payment service provider SOFORT at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/. Cookies Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide whether to accept them individually and prevent the storage of cookies and transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent. You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac Technically Necessary Cookies Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. The use of cookies or comparable technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. Use of Consentmanager We use the Consent Management Tool Consentmanager of Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website. The tool allows you to grant consents to data processing over the website, particularly the setting of cookies, and to make use of your right of revocation for consents already granted. The data processing serves the purpose of obtaining necessary consents for data processing and to document these, thereby complying with legal obligations. Cookies may be used for this purpose. In this process, the following information may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you are using, anonymized IP address, opt-in and opt-out data. This data is not shared with other third parties. The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. For more information on data protection at Consentmanager, please visit: https://www.consentmanager.net/privacy.php Analysis Advertising Tracking Use of Hotjar We use the analysis tool of Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; "Hotjar") on our website. The data processing serves the purpose of demand-oriented design, optimization and analysis of our website. With the tool, movements of page visitors on the website are randomly recorded. This creates a log of mouse movements, scrolling behavior, duration of stay, and clicks on the website (so-called heatmap). For this purpose, Hotjar uses cookies, among other things. The following information may be collected: IP address (in anonymized form), information about the device you are using (screen size, device, unique device identifier), information about the browser you are using, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function, and the storage duration can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies. User profiles are created under a pseudonym from this data. The data is not used to personally identify the visitor of the website and is not merged with personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of appropriate safeguards. Further information on the measures taken is provided by Hotjar on request. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. For more information on data protection when using Hotjar, please visit: https://www.hotjar.com/legal/policies/privacy#enduserenglish. Use of Shopify Statistics We use the statistical and analysis functions of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada) The data processing serves the purpose of analyzing this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about pages or products visited, the referrer URL (the website from which you accessed our website), and information about how you interact with the website. For this purpose, technologies such as cookies, as well as web beacons, tags, and pixels (electronic files used to record information about how you navigate the website) are used. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the order processing contract at https://www.shopify.com/de/legal/dpa, and information about the cookies used at https://www.shopify.com/de/legal/cookies. Use of the Meta Pixel We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website. Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for compliance with the obligations pursuant to Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects pursuant to Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the Service and the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta's obligations under the Joint Processing Agreement. The purpose of the application is to target visitors to the website with interest-based advertising on the social networks Facebook and Instagram. The Meta remarketing tag has been implemented on the website for this purpose. This tag is used to establish a direct connection to the Meta servers when the website is visited. This tells the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the Facebook or Instagram social networks, you will then be shown personalized, interest-based ads. The application also serves the purpose of creating conversion statistics. This tells us the total number of users who have clicked on one of our ads and been redirected to a page with a conversion tracking tag and what actions are taken after being redirected to this website. However, we do not receive any information with which users can be personally identified. Your data may be transferred to the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Meta has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can deactivate the remarketing function "Custom Audiences" here. For more information on the collection and use of data by Meta, your rights in this regard and ways to protect your privacy, please refer to Meta's privacy policy at https://www.facebook.com/about/privacy/. Use of Google Ads Conversion Tracking We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Your data may be transmitted to the servers of Google LLC in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/ Use of Google AdSense We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The purpose of data processing is to rent out advertising space on the website and to target visitors to the website with interest-based advertising. This function is used to display personalized, interest-based advertisements from the Google Display Network to visitors to the provider's website. Google uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information and Google's privacy policy at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/ Use of the LinkedIn Insight Tag On our website, we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Attn: Legal Dept, Wilton Plaza, Wilton Place, Dublin 2, Ireland; "LindedIn") for conversion tracking (visitor action evaluation) and retargeting (display of personalized advertisements). The LinkedIn Insight tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and enables the collection of the following data for this cookie: metadata such as IP address, timestamp and page events (e.g. page views). These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, LinkedIn and we can recognize that you clicked on the ad and were redirected to this page. The LinkedIn Insight tag also allows LinkedIn to collect data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is transferred to LinkedIn, encrypted, the IP addresses are shortened and the direct IDs of LinkedIn members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted by LinkedIn within 90 days. LinkedIn does not share any personal data with us, but only provides aggregated reports on website audience and ad performance. LinkedIn members can specify the use of their personal data for advertising purposes in their account settings. The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn is not certified under the TADPF. Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on cookies and LinkedIn's privacy policy at: https://www.linkedin.com/legal/cookie-policy and https://www.linkedin.com/legal/privacy-policy. Plug-ins and Miscellaneous Use of the Google Tag Manager We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing and optimizing our website in line with requirements. The Google Tag Manager itself neither stores cookies nor does it process personal data. However, it enables the triggering of other tags that can collect and process personal data. You can find more information on terms of use and data protection here. Use of Google reCAPTCHA On our website, we use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The purpose of the query is to distinguish between human input and automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information about Google reCAPTCHA and the associated privacy policy at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy. Use of Cloudflare We use the Content Delivery Network Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This involves a regional network of servers in various data centers, with which our web server connects and through which certain content of our website is delivered. The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly. The following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files). Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The processing of your personal data takes place based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in the demand-oriented and targeted design of the website. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR. Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/. Use of YouTube We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The "Extended Privacy Mode" option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on the collection and use of data by YouTube and Google, about your rights in this regard, and ways to protect your privacy can be found in YouTube's privacy notices at https://www.youtube.com/t/privacy. Use of Google Fonts We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of displaying fonts uniformly on our website. To load the fonts, a connection is made to Google's servers when you call up the page. Cookies may be used in this process. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. An adequacy decision by the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq. Rights of Data Subjects and Retention Period Duration of Storage After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account legal, especially tax and commercial law retention periods, and then deleted after these periods expire, unless you have consented to further processing and use. Rights of the Data Subject If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: right to information, to rectification, to erasure, to restriction of processing, and to data portability. Furthermore, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR and to processing for direct marketing purposes. Right to Lodge a Complaint with a Supervisory Authority According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful. A complaint can be lodged, among others, with the supervisory authority responsible for us, which can be reached at the following contact details: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf, Germany Tel.: +49 211 384240 Fax: +49 211 38424999 Email: poststelle@ldi.nrw.de Right to Object If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right for reasons arising from your particular situation to object to these processes at any time with effect for the future. After the objection has been made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims. If personal data processing is for the purpose of direct marketing, you can object to this processing at any time by notifying us. After the objection, we will terminate the processing of the affected data for the purpose of direct marketing. Last updated: November 29, 2023
Unless specified otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data, and not providing it will have no consequences. This only applies as long as no other statement is made in the subsequent processing activities. "Personal data" refers to any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing personal information. Each time you access our website, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log files (server log files). This stored data includes the name of the page accessed, date and time of access, IP address, the amount of data transferred, and the requesting provider. The processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in ensuring the uninterrupted operation of our website and to improve our services. Your data is also transferred to Canada, among other countries. An adequacy decision by the EU Commission is in place for data transfers to Canada.
Contact Controller
The controller responsible for data processing is HB E-Commerce Rechtsanwaltsgesellschaft GmbH, Torgauer Straße 233, 04347 Leipzig, Germany, email: prime6brands@datenschutz.hb-ecommerce.eu
Proactive Contact by Customer via Email If you contact us proactively by email, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing is intended to process and respond to your contact request. If the contact is for carrying out pre-contractual measures (e.g., consultation in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. If contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We will only use your email address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.
Collection and Processing using the Contact Form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide it. The data processing serves the purpose of making contact. If the contact is for carrying out pre-contractual measures (e.g., consultation regarding an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out based on Article 6(1)(b) GDPR. If contact is made for other reasons, this data processing is carried out based on Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Orders Collection, Processing, and Disclosure of Personal Data for Orders When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of a contract. Failure to provide the data means that no contract can be concluded. The processing is carried out based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is kept to a minimum. Your data will be transferred to Canada, among other countries. The EU Commission has issued an adequacy decision for data transfers to Canada. Ratings Advertising Data Collection when Writing a Comment or Rating When you comment on or rate an article or a post, we only collect your personal data (name, email address, comment text) to the extent you provide. The processing serves the purpose of enabling a comment or rating and displaying comments/ratings. By submitting the comment/rating, you consent to the processing of the transmitted data. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. Your personal data will then be deleted. When your comment or rating is published, only the name you provide will be published. Use of the Email Address for Sending Newsletters We use your email address independently of contract processing exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing takes place based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Use of the Email Address for Sending Direct Advertising We use your email address, which we have received as part of the sale of goods or services, for the electronic sending of advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out based on Article 6(1)(f) GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising your objection in the legal notice. You can also use the link provided in the advertising email for this purpose. This will not incur any costs other than the transmission costs according to the basic rates.
Inventory Management Use of an External Inventory Management System
We use an inventory management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be transmitted to: Billbee GmbH, Arolser Str. 10, 34477 Twistetal The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out based on Article 6(1)(b) GDPR. Payment Service Provider and Credit Information Use of Klarna Payment Options We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR. Cookies may be stored that enable your browser to be recognized. The resulting data processing takes place on the basis of Article 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of different payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation. "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase) For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase), Klarna reserves the right to obtain credit information based on mathematical-statistical procedures using credit agencies. For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated based on scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out based on Article 6(1)(f) GDPR out of our overriding legitimate interest in protection against payment default if Klarna makes advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected. Further information, in particular to which credit agencies Klarna passes on your personal data, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy. Use of SOFORT We use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The purpose of data processing is to be able to offer you various payment methods by processing payments via the payment service provider SOFORT. If you have opted for the payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Article 6(1)(b) GDPR. You can find more information on data processing when using the payment service provider SOFORT at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/. Cookies Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide whether to accept them individually and prevent the storage of cookies and transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent. You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac Technically Necessary Cookies Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. The use of cookies or comparable technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. Use of Consentmanager We use the Consent Management Tool Consentmanager of Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website. The tool allows you to grant consents to data processing over the website, particularly the setting of cookies, and to make use of your right of revocation for consents already granted. The data processing serves the purpose of obtaining necessary consents for data processing and to document these, thereby complying with legal obligations. Cookies may be used for this purpose. In this process, the following information may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you are using, anonymized IP address, opt-in and opt-out data. This data is not shared with other third parties. The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. For more information on data protection at Consentmanager, please visit: https://www.consentmanager.net/privacy.php Analysis Advertising Tracking Use of Hotjar We use the analysis tool of Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; "Hotjar") on our website. The data processing serves the purpose of demand-oriented design, optimization and analysis of our website. With the tool, movements of page visitors on the website are randomly recorded. This creates a log of mouse movements, scrolling behavior, duration of stay, and clicks on the website (so-called heatmap). For this purpose, Hotjar uses cookies, among other things. The following information may be collected: IP address (in anonymized form), information about the device you are using (screen size, device, unique device identifier), information about the browser you are using, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function, and the storage duration can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies. User profiles are created under a pseudonym from this data. The data is not used to personally identify the visitor of the website and is not merged with personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of appropriate safeguards. Further information on the measures taken is provided by Hotjar on request. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. For more information on data protection when using Hotjar, please visit: https://www.hotjar.com/legal/policies/privacy#enduserenglish. Use of Shopify Statistics We use the statistical and analysis functions of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada) The data processing serves the purpose of analyzing this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information is also collected about pages or products visited, the referrer URL (the website from which you accessed our website), and information about how you interact with the website. For this purpose, technologies such as cookies, as well as web beacons, tags, and pixels (electronic files used to record information about how you navigate the website) are used. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the order processing contract at https://www.shopify.com/de/legal/dpa, and information about the cookies used at https://www.shopify.com/de/legal/cookies. Use of the Meta Pixel We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website. Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for compliance with the obligations pursuant to Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects pursuant to Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the Service and the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta's obligations under the Joint Processing Agreement. The purpose of the application is to target visitors to the website with interest-based advertising on the social networks Facebook and Instagram. The Meta remarketing tag has been implemented on the website for this purpose. This tag is used to establish a direct connection to the Meta servers when the website is visited. This tells the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the Facebook or Instagram social networks, you will then be shown personalized, interest-based ads. The application also serves the purpose of creating conversion statistics. This tells us the total number of users who have clicked on one of our ads and been redirected to a page with a conversion tracking tag and what actions are taken after being redirected to this website. However, we do not receive any information with which users can be personally identified. Your data may be transferred to the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Meta has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles. Your personal data is processed with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can deactivate the remarketing function "Custom Audiences" here. For more information on the collection and use of data by Meta, your rights in this regard and ways to protect your privacy, please refer to Meta's privacy policy at https://www.facebook.com/about/privacy/. Use of Google Ads Conversion Tracking We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Your data may be transmitted to the servers of Google LLC in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/ Use of Google AdSense We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The purpose of data processing is to rent out advertising space on the website and to target visitors to the website with interest-based advertising. This function is used to display personalized, interest-based advertisements from the Google Display Network to visitors to the provider's website. Google uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information and Google's privacy policy at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/ Use of the LinkedIn Insight Tag On our website, we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Attn: Legal Dept, Wilton Plaza, Wilton Place, Dublin 2, Ireland; "LindedIn") for conversion tracking (visitor action evaluation) and retargeting (display of personalized advertisements). The LinkedIn Insight tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and enables the collection of the following data for this cookie: metadata such as IP address, timestamp and page events (e.g. page views). These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, LinkedIn and we can recognize that you clicked on the ad and were redirected to this page. The LinkedIn Insight tag also allows LinkedIn to collect data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is transferred to LinkedIn, encrypted, the IP addresses are shortened and the direct IDs of LinkedIn members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted by LinkedIn within 90 days. LinkedIn does not share any personal data with us, but only provides aggregated reports on website audience and ad performance. LinkedIn members can specify the use of their personal data for advertising purposes in their account settings. The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn is not certified under the TADPF. Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on cookies and LinkedIn's privacy policy at: https://www.linkedin.com/legal/cookie-policy and https://www.linkedin.com/legal/privacy-policy. Plug-ins and Miscellaneous Use of the Google Tag Manager We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing and optimizing our website in line with requirements. The Google Tag Manager itself neither stores cookies nor does it process personal data. However, it enables the triggering of other tags that can collect and process personal data. You can find more information on terms of use and data protection here. Use of Google reCAPTCHA On our website, we use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The purpose of the query is to distinguish between human input and automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information about Google reCAPTCHA and the associated privacy policy at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy. Use of Cloudflare We use the Content Delivery Network Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This involves a regional network of servers in various data centers, with which our web server connects and through which certain content of our website is delivered. The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly. The following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files). Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The processing of your personal data takes place based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in the demand-oriented and targeted design of the website. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR. Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/. Use of YouTube We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The "Extended Privacy Mode" option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on the collection and use of data by YouTube and Google, about your rights in this regard, and ways to protect your privacy can be found in YouTube's privacy notices at https://www.youtube.com/t/privacy. Use of Google Fonts We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of displaying fonts uniformly on our website. To load the fonts, a connection is made to Google's servers when you call up the page. Cookies may be used in this process. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. An adequacy decision by the EU Commission is available for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq. Rights of Data Subjects and Retention Period Duration of Storage After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account legal, especially tax and commercial law retention periods, and then deleted after these periods expire, unless you have consented to further processing and use. Rights of the Data Subject If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: right to information, to rectification, to erasure, to restriction of processing, and to data portability. Furthermore, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR and to processing for direct marketing purposes. Right to Lodge a Complaint with a Supervisory Authority According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful. A complaint can be lodged, among others, with the supervisory authority responsible for us, which can be reached at the following contact details: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf, Germany Tel.: +49 211 384240 Fax: +49 211 38424999 Email: poststelle@ldi.nrw.de Right to Object If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right for reasons arising from your particular situation to object to these processes at any time with effect for the future. After the objection has been made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims. If personal data processing is for the purpose of direct marketing, you can object to this processing at any time by notifying us. After the objection, we will terminate the processing of the affected data for the purpose of direct marketing. Last updated: November 29, 2023