Privacy Policy

  1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data when using our website is very important to us.

 

According to Art. 4 No. 1 GDPR, personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address.

Data from which no reference to your person can be made, for example through anonymization, is not personal data. Processing (e.g. collection, storage, reading, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of processing has been achieved and no legally prescribed retention obligations need to be upheld.

Here you will find information on how your personal data is handled when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you.

We will also explain the type and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

 

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer by a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on their websites.

 

 

 

 

 

  1. Controller

The controller for the processing of personal data on this website is (see imprint):

 

  1. Provision and use of the website/server log files
  2. a) Type and scope of data processing

If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:

  • IP address
  • Date and time of the request
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Access status/HTTP status code
  • Browser type
  • Language and version of browser software
  • Operating system

 

  1. b) Purpose and legal basis

This processing is technically necessary to be able to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.           

  1. c) Storage duration

As soon as the personal data mentioned are no longer required to display the website, they will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object in this respect. Further storage may take place in individual cases if this is legally required.

 

  1. Use of cookies
  2. a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that are sent by us to your device's browser and stored there when you visit our website.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, cookies enable us to make our website more user-friendly and effective by, among other things, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

Temporary cookies/session cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookies makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and it is possible to recognize your device during later website visits.

Permanent cookies

Our website uses so-called permanent cookies. Permanent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to observe anonymized user behavior on our website.

We also use advertising cookies. These cookies can track user behavior for advertising and targeted marketing purposes.

Social media cookies enable you to connect to your social networks and share content from our website within your networks.

Configuration of browser settings

Most web browsers are pre-set to automatically accept cookies. However, you can configure your respective browser so that it only accepts certain or no cookies at all. However, we would like to point out that you may then no longer be able to use all functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser so that it notifies you before cookies are stored. Since the different browsers may differ in their respective functionalities, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require storing a permanent cookie on your computer. If you then delete this cookie, you will have to disable it again.

  1. b) Legal basis

Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies based on a notice provided by us on the website ("Cookie banner"), the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

 

  1. c) Storage duration

As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is legally required.

 

  1. Data collection for the implementation of pre-contractual measures and for contract fulfillment
  2. a) Type and scope of data processing

In the pre-contractual area and upon conclusion of a contract, we collect personal data about you. This includes, for example, first and last name, address, e-mail address, telephone number or bank details.

 

  1. b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of contract execution or for the fulfillment of pre-contractual obligations.

 

The legal basis for this is Art. 6 para. 1 lit b) GDPR. If you have given your consent, Art. 6 para. 1 lit. a) GDPR is an additional legal basis.

  1. c) Storage duration

The data will be deleted as soon as it is no longer required for the purpose of its processing.

 

In addition, statutory retention obligations may exist, for example, commercial or tax law retention obligations according to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

  1. Order form

There is an order form on our website that can be used for electronic pre-orders.

 

  1. a) Type and scope of data processing

Our data collection is limited to the following data:

  • First and last name
  • Phone number
  • E-mail address
  • Account details
  • Product name
  1. b) Purpose and legal basis

The purpose of data processing is to be able to process your order appropriately.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of data serves the fulfillment of a contract, or is necessary for the implementation of a pre-contractual measure that was carried out at the request of the data subject.

 

  1. c) Storage duration

The data will be deleted as soon as it is no longer required for the purpose of processing.

In addition, statutory retention obligations may exist, for example, commercial or tax law retention obligations according to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

  1. Registration option
  2. a) Type and scope of data processing

You can register on our website. If you register, we collect and store the data you enter into the input mask (e.g. surname, first name, e-mail address). No data will be passed on to third parties.

 

  1. b) Purpose and legal basis of data processing

Your registration is necessary for the use of certain content and services on our website or for the fulfillment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the data inventory of the controller.

The legal basis for processing in the case of consent is Art. 6 para. 1 lit. a)
GDPR. If your registration serves to prepare for a contract, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.


  1. c) Storage duration

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

 

  1. Data transfer

We only pass on your personal data to third parties if:

  1. a) You have given your express consent to this in accordance with Art. 6 para. 1 lit. a) GDPR.
  2. b) this is legally permissible and necessary in accordance with Art. 6 para. 1 lit. b) GDPR for the fulfillment of a contractual relationship with you or the implementation of pre-contractual measures.
  3. c) there is a legal obligation for the transfer in accordance with Art. 6 para. 1 lit. c) GDPR.

We are legally obliged to transmit data to government authorities, e.g. tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement agencies.

  1. d) the disclosure is necessary in accordance with Art. 6 para. 1 lit. f) GDPR for the protection of legitimate company interests, as well as for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.
  2. e) in accordance with Art. 28 GDPR, we use external service providers as processors for processing, who have been obliged to handle your data carefully.

 

We use such service providers in the areas of:

  • IT
  • Logistics
  • Telecommunications

When transmitting data to external entities in third countries, i.e., outside the EU or EEA, we ensure that these entities treat your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or when we ensure careful handling of personal data through contractual agreements or other appropriate safeguards.

  1. Application Option
    a) Type and Scope of Data Processing

You can apply on our website or by e-mail. When you apply, we collect and store the data you enter into the input mask or send to us by e-mail.

 

  1. b) Purpose and Legal Basis
    We process your data only for the purpose of processing your application.
    Data will not be disclosed to third parties. The legal basis for the processing is Art. 88 (1) GDPR in conjunction with Section 26 BDSG and additionally Art. 6 (1) lit. b) GDPR.

If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 (1) lit. a) GDPR.

 

  1. c) Storage Period

If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. The period begins with the receipt of the rejection letter.

 

If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.

 

  1. d) Data Transfer

Only those departments involved in the decision (responsible human resources or specialist departments, management, works council) will receive your data.

In addition, we are obliged to transmit your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social insurance carriers, etc.).

 

Further data recipients may be those entities for which you have given us your consent to transfer data.

 

  1. Comment Function
  2. a) Type and Scope of Data Processing

You can comment on posts on our website. When you comment on a post, we collect and store the data you enter in the input mask. In addition to the comments you leave, information about the time the comment was entered and possibly the username (pseudonym) you chose will also be stored and published. Furthermore, the IP address assigned by the Internet service provider (ISP) of the data subject is stored. No data will be passed on to third parties.

 

  1. b) Purpose and Legal Basis

The data transmitted by you (e.g. the IP address) is for security reasons and in case the data subject violates the rights of third parties or posts illegal content through a comment.

These collected personal data will not be passed on to third parties, unless such disclosure is required by law or serves the legal defense of the data controller.

 

The legal basis for the processing of personal data transmitted when using the comment function is, if and insofar as your consent is available, Art. 6 (1) lit. a) GDPR. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

A further legal basis is Art. 6 (1) lit. f) GDPR.

We have a legitimate interest in processing if third-party rights are violated or illegal content is posted. This serves as security if someone writes illegal content in comments and posts (insults, forbidden political propaganda, etc.).

 

  1. c) Storage Period

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.

  1. Contact Form
  2. a) Type and Scope of Data Processing

On our website, we offer you the opportunity to contact us via a provided form. During the process of submitting your inquiry via the contact form, reference is made to this privacy policy to obtain your consent.

 

If you use the contact form, the following personal data will be processed from you:

- Salutation

- First Name

- Last Name

- Title

- Company

- Industry

- Function

- Street

- Street Number

- Postal Code

- City

- Country

- E-mail address

- Phone number

- Subject

- Message content

 

  1. b) Purpose and Legal Basis

The purpose of providing your e-mail address is to send you a response to your inquiry via e-mail. When using the contact form, your personal data will not be passed on to third parties.

 

The legal basis for the processing is consent in accordance with Art. 6 (1) lit. a) GDPR, based on the consent declaration voluntarily given by you below and revocable at any time for the future:

 

  1. c) Storage Period

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). This does not affect mandatory legal provisions – in particular retention periods under the Commercial Code (HGB) or the Tax Code (AO).

 

  1. Contact Options via E-mail

On our website, you have the option to contact us by e-mail.

  1. a) Type and Scope of Data Processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and to any personal data you voluntarily provide during contact.

 

  1. b) Purpose and Legal Basis

The purpose of data processing is to be able to adequately answer your request. The legal basis for this is Art. 6 (1) lit. f) GDPR. There is a legitimate interest in processing the aforementioned personal data in order to properly handle your request.

 

  1. c) Storage Period

The duration of storage of the aforementioned data depends on the background of your contact. Your personal data will generally be deleted if the purpose of the communication has ceased to exist and storage is no longer necessary. This may result, for example, from the processing of your request.

 

  1. Newsletter
    a) Type and Scope of Data Processing

On our website, you have the option to subscribe to a free regular e-mail newsletter. To send you the newsletter regularly, we need your e-mail address.

 

For sending the newsletter, we use the so-called double opt-in procedure.

 

This means that we will only send you an e-mail newsletter if you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive newsletters from us in the future by clicking on a corresponding link.

 

This serves to ensure that only you, as the owner of the specified e-mail address, can register for the newsletter. Your confirmation must be made promptly after receiving the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g., last name, first name, e-mail address).

When registering for the newsletter, we also store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your e-mail address at a later date. For the confirmation e-mail sent for control purposes (double opt-in in the
e-mail), we also store the date and time of the click on the confirmation link and the IP address entered by the Internet Service Provider (ISP).

 

  1. b) Purpose and Legal Basis
    The data collected by us when registering for the newsletter is used exclusively for the purpose of advertising contact via the newsletter.

The processing of your e-mail address for sending the newsletter is based on Art. 6 (1) lit. a) GDPR and Section 7 (2) No. 3 UWG on the consent declaration voluntarily given by you below and revocable at any time for the future.

Furthermore, the processing is based on Art. 6 (1) lit. f) GDPR due to our legitimate interests in documenting proof of the required consent.

 

  1. c) Storage Period

Your e-mail address will be stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address will be deleted, unless you have expressly consented to further use of your data.

 

  1. Tracking and Analytics Tools

You can find an exact overview of the web analysis and social media tools we use here.

Shopify

We host our website with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We use Shopify based on processing on our behalf.

When you visit our website, Shopify collects your IP address as well as information about the device you use and your browser. Shopify also analyzes user behavior and creates user statistics. When you make a purchase through our website, your name, e-mail address, delivery and billing addresses, payment data and other data related to the purchase (e.g. phone number, amount of sales generated, etc.) are collected by Shopify. For analysis purposes, Shopify stores cookies in your browser.

All data collected on our website is processed on Shopify's servers. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

 

Shopify Payments

We use the payment service provider "Shopify Payments." If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provide during the order process.

The transfer of your data to Stripe is based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations. All data required for payment processing is used exclusively for carrying out payments and transmitted via the "SSL" procedure. Stripe is PCI DSS certified.

Stripe may transfer, process, and store personal data outside the EU. In this case, Stripe has agreed to EU Standard Contractual Clauses for data transfer outside the EU/EEA, which ensure a level of data protection comparable to the GDPR.

Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.

More information on Stripe's data protection can be found at: https://stripe.com/de/privacy.

 

 

 

 

  1. Data Security and Security Measures

We commit to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognized encryption procedures (SSL or TLS). However, data disclosed unencrypted, for example, if this occurs via unencrypted e-mail, may possibly be read by third parties. We have no influence over this. It is the responsibility of the respective user to protect the data provided by them through encryption or in any other way against misuse.

 

  1. Changes to the Privacy Policy

We reserve the right to update this statement at any time as required.

 

  1. Your Rights

Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact the responsible party in this regard (item 2).

 

Right to withdraw your data protection consent pursuant to Art. 7 (3) sentence 1 GDPR

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of processing carried out before the withdrawal.

 

a. Right of access pursuant to Art. 15 GDPR

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. If this is the case, you have the right to access this personal data and to further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

b. Right to rectification and completion pursuant to Art. 16 GDPR

You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

c. Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

You have a right to erasure, provided that the processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have withdrawn your data protection consent, or the data has been processed unlawfully.           

d. Right to restriction of processing pursuant to Art. 18 GDPR

You have a right to restriction of processing, e.g., if you believe the personal data is inaccurate.

 e. Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

 

f. Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. 

In the case of direct marketing, you, as the data subject, have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

g. Automated individual decision-making, including profiling pursuant to Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing – including profiling – except in the exceptional cases mentioned in Art. 22 GDPR.

 

Automated decision-making based solely on automated processing – including profiling – does not take place.

 h. Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

Furthermore, you can lodge a complaint with a data protection supervisory authority at any time, for example, if you believe that data processing is not in compliance with data protection regulations.