0
Your Cart

Privacy Policy

Data Protection Information

We hereby inform you, in accordance with the legal provisions of data protection law (particularly pursuant to the new version of the BDSG and the European General Data Protection Regulation “GDPR”), about the type, scope, and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. Regarding the definition of terms such as “personal data” or “processing,” we refer to Art. 4 GDPR.

Name and Contact Information of the Data Controller

Our Data Controller (hereinafter referred to as “Controller”) in accordance with Art. 4 No. 7 GDPR is:

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below, we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

  1. Types of Data We Process:
    • Inventory data (e.g., name, address)
    • Contact data (e.g., phone number, email, fax)
    • Payment data (e.g., bank details, account data, payment history)
    • Contract data (e.g., subject matter of the contract, term)
    • Content data (e.g., text entries, videos, photos)
    • Communication data (e.g., IP address)
  2. Purposes of Processing According to Art. 13 Para. 1 c) GDPR:
    • Fulfillment of contracts
    • Customer service and support
    • Processing of contact requests
  3. Categories of Data Subjects According to Art. 13 Para. 1 e) GDPR:
    • Visitors/users of the website
    • Customers
    • Prospective customers

The data subjects are collectively referred to as “users.”

Legal Basis for the Processing of Personal Data

Below, we inform you about the legal basis for the processing of personal data:

  • If we have obtained your consent for the processing of personal data, Art. 6 Para. 1 Sentence 1 lit. a) GDPR serves as the legal basis.
  • If the processing is necessary for the performance of a contract or for pre-contractual measures that are carried out at your request, Art. 6 Para. 1 Sentence 1 lit. b) GDPR serves as the legal basis.
  • If the processing is necessary for compliance with a legal obligation to which we are subject (e.g., legal retention obligations), Art. 6 Para. 1 Sentence 1 lit. c) GDPR serves as the legal basis.
  • If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 Para. 1 Sentence 1 lit. d) GDPR serves as the legal basis.
  • If the processing is necessary for the purposes of legitimate interests pursued by us or a third party, and if your interests or fundamental rights and freedoms do not override those interests, Art. 6 Para. 1 Sentence 1 lit. f) GDPR serves as the legal basis.

Disclosure of Personal Data to Third Parties and Data Processors

We do not generally share your data with third parties without your consent. Should this occur, the disclosure will be based on the legal grounds mentioned above, such as the sharing of data with online payment providers for contract fulfillment or due to a court order or legal obligation to release the data for law enforcement, threat prevention, or the enforcement of intellectual property rights.

We also use data processors (external service providers, e.g., for hosting our websites and databases) to process your data. When data is transferred to data processors under a processing agreement, this is always done in accordance with Art. 28 GDPR. We select our data processors carefully, monitor them regularly, and have secured the right to issue instructions regarding the data. Additionally, the data processors must have taken appropriate technical and organizational measures and comply with data protection regulations as per BDSG n.F. and GDPR.

Data Transfer to Third Countries

With the adoption of the European General Data Protection Regulation (GDPR), a uniform basis for data protection has been established in Europe. Therefore, your data is predominantly processed by companies where GDPR is applicable. Should the processing by third-party services occur outside the European Union or the European Economic Area, these third parties must meet the special requirements of Art. 44 et seq. GDPR. This means that the processing is based on special guarantees, such as the official recognition by the EU Commission of an adequate level of data protection or the observance of officially recognized specific contractual obligations, known as “standard contractual clauses.”

If, due to the invalidity of the so-called “Privacy Shield,” we seek your explicit consent for data transfer to the USA under Art. 49 Para. 1 Sentence 1 lit. a) GDPR, we hereby inform you of the risk of secret access by U.S. authorities and the use of data for surveillance purposes, possibly without any legal remedy available to EU citizens.

Data Deletion and Storage Duration

Unless explicitly stated in this privacy policy, your personal data will be deleted or blocked as soon as the consent for processing has been revoked or the purpose for storage ceases to exist, or if the data is no longer required for that purpose unless its continued storage is necessary for evidence purposes or legal retention obligations oppose this. These include, for example, commercial retention obligations for business letters under § 257 Para. 1 HGB (6 years) and tax retention obligations for documents under § 147 Para. 1 AO (10 years). If the prescribed retention period expires, your data will be blocked or deleted unless storage is still necessary for contract fulfillment or initiation.

Existence of Automated Decision-Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

If you use our website for informational purposes only (i.e., without registration or other transmission of information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:

  • IP address
  • Internet Service Provider of the user
  • Date and time of access
  • Browser type
  • Language and browser version
  • Content of the access request
  • Time zone
  • Access status/HTTP status code
  • Data volume
  • Websites from which the request comes
  • Operating system

This data is not stored together with other personal data. The data is used to ensure the user-friendly, functional, and secure delivery of our website to you, along with its functions and content, as well as its optimization and statistical evaluation. The legal basis is our legitimate interest in data processing according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

We store this data in server log files for security reasons for a duration of 180 days. After this period, it is automatically deleted unless we need to retain it as evidence in case of attacks on the server infrastructure or other legal violations.

Cookies

We use so-called cookies during your visit to our website. Cookies are small text files that your internet browser stores on your computer. When you visit our website again, these cookies provide information that allows us to automatically recognize you. Cookies may also include so-called “user IDs,” where user information is stored using pseudonymized profiles. We inform you about the use of cookies for the aforementioned purposes when you visit our website and how you can object to their use or prevent their storage (“opt-out”).

Cookies are categorized as follows:

  • Necessary, essential cookies: Essential cookies are necessary for the operation of the website, e.g., to store login information, shopping cart content, or user input regarding the language of the website.
  • Session cookies: Session cookies are required to recognize multiple uses of an offer by the same user (e.g., if you have logged in, to determine your login status). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained through this is used to optimize our offerings and provide you with easier access to our site. Session cookies are deleted when you close the browser or log out.
  • Persistent cookies: These cookies remain stored even after the browser is closed. They are used to store the login, measure reach, and for marketing purposes. They are automatically deleted after a predetermined period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
  • Third-party cookies: Depending on your preferences, you can configure your browser settings to accept third-party cookies or reject all cookies. However, we point out that this may limit the functionality of our website. For more information on these cookies, please refer to the respective data protection policies of the third-party providers.

Data categories: User data, cookies, user ID (including visited pages, device information, access times, and IP addresses).

Purposes of processing: The information obtained is used to technically and economically optimize our web offerings and provide you with easier and safer access to our website.

Legal basis: If we process your personal data with the help of cookies based on your consent (“opt-in”), then Art. 6 Para. 1 Sentence 1 lit. a) GDPR serves as the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, so Art. 6 Para. 1 Sentence 1 lit. f) GDPR serves as the legal basis in this case. If cookies are set for contract initiation, e.g., for orders, Art. 6 Para. 1 Sentence 1 lit. b) GDPR serves as the legal basis.

Storage duration/deletion: The data is deleted as soon as it is no longer required to achieve the purpose of its collection. If data is collected to provide the website, this occurs when the respective session ends. Cookies are otherwise stored on your computer and transmitted to us from there. Therefore, as a user, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to fully use all functions of the website.

Objection and “opt-out”: Regardless of the aforementioned consent or legal permission, you can also generally prevent data processing by cookies in your browser by disabling the setting for cookies, deactivating the “Do Not Track” function of your browser, or activating the “Do Not Track” function of your browser. You can opt out of processing for advertising purposes by using the following websites:

Presence on Social Media Platforms

We maintain profiles and fan pages on social media platforms to communicate with the users active there and provide information about our services. When you use these platforms, your data may be processed outside the European Union, which could pose a risk to you (e.g., difficulty in enforcing your rights). User data is usually processed for market research and advertising purposes. For example, user profiles may be created based on user behavior and resulting interests. These profiles may be used to display ads inside and outside the platforms that correspond to the users’ interests. For this purpose, cookies are usually stored on the users’ computers, which contain usage behavior and interests. Furthermore, data may also be stored in the user profiles independently of the devices used by the users, especially if the users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the options to object (opt-out), we refer to the privacy policies and information provided by the operators of the respective platforms.

Data subjects: Users registered on the social media platform

Purpose of processing: Communication with users and processing of the data for market research and advertising purposes

Legal basis: The legal basis for the processing of personal data is our legitimate interest in the communication with users and the processing of the data for market research and advertising purposes according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If the users are asked by the respective providers for consent to the data processing, the legal basis is Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

Plug-ins Used

We use third-party plug-ins to enhance the functionality of our website. Below, you will find a list of these plug-ins along with the associated providers, their addresses, and links to their respective privacy policies:

  • Facebook: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA
  • Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, California 94103, USA
  • Google+: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA
  • LinkedIn: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
  • XING: XING AG, Dammtorstraße 30, 20354 Hamburg, Germany

Data subjects: Users of these third-party platforms

Purpose of processing: The purpose of processing personal data is to make our website more user-friendly and enhance its functionality.

Legal basis: The legal basis for processing is Art. 6 Para. 1 Sentence 1 lit. f) GDPR, based on our legitimate interest in providing a user-friendly and functional website. If the processing is based on the user’s consent, then Art. 6 Para. 1 Sentence 1 lit. a) GDPR applies.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies that are stored on your computer and allow an analysis of your use of our website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator.

Data subjects: Users of our website

Purpose of processing: The purpose of processing personal data is to analyze the use of our website, compile reports on website activity, and provide other services related to website activity and internet usage.

Legal basis: The legal basis for processing is your consent according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

Data transfer to third countries: The data collected by Google Analytics may be transferred to third countries, such as the USA. As the CJEU has invalidated the “Privacy Shield” framework, the transfer is now based on the standard contractual clauses.

Objection: You can prevent the storage of cookies by adjusting your browser software accordingly. However, please note that in this case, you may not be able to use all the features of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available under the following link: Google Analytics Opt-out Browser Add-on.

Right to Information, Correction, Deletion, and Restriction of Processing

You have the right to request confirmation from us at any time as to whether we are processing personal data concerning you. If this is the case, you have the right to request information about this personal data and to receive the following information:

  • The purposes of the processing;
  • The categories of personal data;
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • The planned duration of storage or the criteria for determining the duration;
  • The existence of a right to rectification or deletion of your personal data or restriction of processing or a right to object to this processing;
  • The right to lodge a complaint with a supervisory authority;
  • If the personal data is not collected from you, all available information on the source of the data;
  • The existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

You also have the right to request the correction of inaccurate data or the completion of incomplete data without undue delay. You also have the right to request that your data be deleted without undue delay if one of the following reasons applies:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • You withdraw your consent on which the processing is based according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR, and there is no other legal basis for the processing;
  • You object to the processing according to Art. 21 Para. 1 GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21 Para. 2 GDPR;
  • The personal data has been unlawfully processed;
  • The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject;
  • The personal data was collected in relation to the offer of information society services according to Art. 8 Para. 1 GDPR.

If we have made the personal data public and are obliged to delete it, we will take appropriate measures, including technical measures, considering the available technology and implementation costs, to inform data controllers processing the personal data that you have requested the deletion of all links to, or copies or replications of, this personal data.

You have the right to request the restriction of processing if one of the following conditions applies:

  • You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data;
  • The processing is unlawful, and you oppose the deletion of the personal data and request the restriction of its use instead;
  • We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise, or defense of legal claims;
  • You have objected to processing pursuant to Art. 21 Para. 1 GDPR pending the verification of whether our legitimate grounds override yours.

If you have exercised your right to rectify, delete, or restrict the processing, we are obliged to inform all recipients to whom your personal data has been disclosed unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller without hindrance from us if:

  • The processing is based on consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a) GDPR or on a contract pursuant to Art. 6 Para. 1 Sentence 1 lit. b) GDPR; and
  • The processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from us to another data controller, where technically feasible. This must not adversely affect the rights and freedoms of others.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of personal data at any time with future effect. This does not affect the lawfulness of the processing carried out based on the consent until its withdrawal.

Right to Object

You have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 Para. 1 Sentence 1 lit. e) or f) GDPR, for reasons arising from your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Automated Decisions in Individual Cases Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

  • Is necessary for entering into, or performance of, a contract between you and us;
  • Is authorized by Union or Member State law to which we are subject, and that also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • Is based on your explicit consent.

However, these decisions must not be based on special categories of personal data referred to in Art. 9 Para. 1 GDPR unless Art. 9 Para. 2 lit. a) or g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

Regarding the cases referred to in the first and third bullets above, we will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you violates the GDPR.

Security

We have taken technical and organizational security measures to protect your data, in particular against loss, manipulation, or unauthorized access. We regularly adapt our security measures to ongoing technical developments.

Contact Us

If you have any questions or concerns regarding data protection, please feel free to contact us via the contact details provided on our website.

Last updated: August 2024

We are using functional cookies only, so the website can work properly.

Privacy policy