You are here: / / Privacy Policy

Privacy Policy

Below, we provide information about how we process your personal data. Personal data, as defined in Article 4 of the General Data Protection Regulation (GDPR), means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, email address, invoices, bank account details, and information about your use of our website.

Table of Contents:

1. Contact Information
2. Lawful Basis for the Processing of Personal Data
3. Collection and Storage of Personal Data, Including the Purpose of Their
Processing
4. Data Retention and Deletion
5. Disclosure of Personal Data to Third Parties
6. Hosting
7. Cookies
8. Payment Service Providers
9. Credit Checks
10. Analytics Services
11. Social Media Services
12. Other Online Services
13. Data Subject Rights
14. Right to Object
15. Data Security
16. Updates and Amendments to this Privacy Policy

1. Contact Information

This Privacy Policy applies to the processing of personal data by the following data controller:

Data Controller
desiderm Germany GmbH
Pleidelsheimer Straße 18
74321 Bietigheim-Bissingen
Germany
Email: info@desiderm.de
Phone: +49 (0)7042 27310-00
Fax: +49 (0)7042 27310-19

2. Lawful Basis for the Processing of Personal Data

As a general principle, we collect and process the personal data of our users only to the extent necessary to provide a functional website and to deliver our content and services. Personal data is generally collected and processed only with the user’s consent. Exceptions apply where obtaining prior consent is not feasible for practical reasons or where the processing of personal data is permitted by applicable legal provisions.
Under Article 6 of the General Data Protection Regulation (GDPR), the processing of personal data is lawful if one or more of the following legal bases apply:

  • You have given your explicit consent to the processing of your personal data in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
  • The processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract, in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR).
  • The processing is necessary for compliance with a legal obligation to which we are subject, in accordance with Article 6(1)(c) of the General Data Protection Regulation (GDPR).
    The processing is necessary to protect your vital interests or those of another natural person, in accordance with Article 6(1)(d) of the General Data Protection Regulation (GDPR).
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, in accordance with Article 6(1)(e) of the General Data Protection Regulation (GDPR).
  • The processing is necessary for the purposes of our legitimate interests or those of a third party, in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR), unless your interests or fundamental rights and freedoms, which require the protection of your personal data, override those interests.

3. Collection and Storage of Personal Data, Including the Purpose of Their Processing

When you use our website, we may process personal data relating to our website users, including customers, prospective customers, and visitors. Such personal data may include, for example, contact details, usage data, and communication data.
We process this information to provide a fully functional website, communicate with our website users, respond to contact and customer inquiries, and fulfill contractual obligations. In addition, cookies are used when you visit our website (see the “Cookies” section of this Privacy Policy). We may also use third-party online services to collect and process data for marketing purposes, provided that you have given your consent. Further information about these activities can be found in this Privacy Policy.

Below, we explain what personal data we may collect from you, the purposes for which it is collected, and how it may be processed.

When Visiting Our Website
When you access our website, the browser used on your device automatically transmits certain information to our web server. This information is temporarily stored in so-called log files. Unless otherwise specified, the following information may be collected automatically, without any action on your part, and stored for up to 30 days before being deleted automatically:

  • IP address of the requesting device
  • Date and time of access
  • Requested content (specific webpage
  • Name and URL of the retrieved file
  • Access status / HTTP status code
  • Amount of data transferred
  • Website from which access originated (referrer URL)
  • Browser used, including, where applicable, your device’s operating system and the name of your internet service provider (ISP)
  • Browser language and browser version

Where collected, the above-mentioned data is processed for the following purposes:

  • To ensure the smooth operation and proper connection of our website
  • To provide a user-friendly and convenient browsing experience
  • To monitor and maintain the security and stability of our systems
  • For additional administrative purposes

The legal basis for this data processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.
In addition, we may use cookies and third-party online services when you visit our website.

Further details can be found in this Privacy Policy.

Pre-Contractual Inquiries and Contract Performance
We process personal data that we receive in connection with pre-contractual inquiries, our business relationship with you, and the handling of contract withdrawals (right of withdrawal). Depending on the circumstances, we may collect and process the following categories of personal data:
Title (salutation)
First and last name
Postal address
Telephone number
Email address
Contract and order details, such as order number, subject matter and term of the contract, and payment information
In addition, your personal data may be disclosed to third parties where necessary (see Section 5, “Disclosure of Personal Data to Third Parties,” of this Privacy Policy).

Your personal data is processed and stored on the basis of Article 6(1)(b) of the General Data Protection Regulation (GDPR) for the purpose of performing a contract or taking steps at your request prior to entering into a contract. In all other cases, we process and store your personal data either on the basis of your consent in accordance with Article 6(1)(a) GDPR or on the basis of our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR.
Unless statutory retention periods require otherwise, the personal data collected and stored by us will be deleted as soon as the purpose for which it was collected no longer applies and further storage is no longer necessary (for example, once your inquiry has been fully processed or the business relationship has ended).

Newsletter Subscription
You have the option to subscribe to our newsletter. To do so, we require your email address. Optionally, you may also provide your name so that we can address you personally in our newsletter.
We use the double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. By clicking the activation link contained in that email, you confirm that you are the owner of the email address and wish to receive our newsletter.
If you have given your explicit consent, we will use your email address to send you our newsletter containing information about our products, services, and offers on a regular basis. The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
If you do not confirm your subscription by clicking the activation link within three weeks, the email address provided for the newsletter subscription will be deleted automatically.
The personal data collected is used solely for sending the newsletter and documenting your consent. When you subscribe to our newsletter, we also store your IP address and the date and time of your registration. This information is stored exclusively as proof of your consent in the event that a third party misuses an email address and subscribes to the newsletter without the knowledge of the authorized owner.
We use a third-party email service provider to distribute our newsletters. Personal data is generally transferred directly to the service provider’s servers and stored there, which may include servers located in the United States. The service provider processes this data on our behalf for the purpose of sending newsletters and compiling statistical analyses relating to newsletter performance.

Newsletter Performance Tracking
To measure the effectiveness of our newsletters, we use so-called web beacons (small invisible graphics) to collect information. These are pixel-sized files that are retrieved from the email service provider’s servers when you open one of our newsletters.
This enables us to determine, for example, whether a newsletter has been opened. Technical information such as your IP address, browser type, and the time the email was accessed may also be collected.
This data is evaluated exclusively to analyze the reading behavior of our newsletter recipients and to improve and tailor the content of our newsletters to their interests.
Please note that it is not possible to opt out of newsletter performance tracking separately. If you do not wish your interactions with our newsletters to be tracked, you must unsubscribe from the newsletter entirely.

The use of an email service provider for the distribution of our newsletter, as well as the performance tracking described above, is based on your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR) and on our legitimate interests pursuant to Article 6(1)(f) GDPR in maintaining an efficient, user-friendly, and secure newsletter system.
A Data Processing Agreement (DPA) has been concluded with the service provider in accordance with Article 28(3) GDPR.

You may unsubscribe from our newsletter at any time and withdraw your consent with future effect. Once you unsubscribe, the personal data stored for the purpose of sending the newsletter will be deleted, and you will no longer receive newsletters from us.
You can withdraw your consent by clicking the unsubscribe link included in every newsletter email or by contacting us using the contact details provided in the Legal Notice (Imprint).

Versanddienstleister:
CleverReach
Der Versand unserer Newsletter erfolgt durch den Versanddienstleister CleverReach GmbH & Co. KG // CRASH-Building, Schafjückenweg 2, 26180 Rastede, Deutschland.
Die Datenschutzbestimmungen von CleverReach können Sie hier einsehen: https://www.cleverreach.com/de/datenschutz/
https://www.cleverreach.com/de/datenschutz/

Contact Form
If you have any questions, you may contact us using the contact form provided on our website. To enable us to process and respond to your inquiry, you are required to provide your first and last name as well as a valid email address. Providing your telephone number is optional.
Your personal data is processed and stored for the purpose of handling your inquiry on the basis of Article 6(1)(b) of the General Data Protection Regulation (GDPR), where the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract. We may also process your personal data on the basis of your consent pursuant to Article 6(1)(a) GDPR and, where applicable, on the basis of our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR.
Unless statutory retention periods require otherwise, the personal data collected and stored by us will be deleted as soon as the purpose for which it was collected no longer applies and further storage is no longer necessary (for example, once your inquiry submitted via the contact form has been fully processed).

Creating a Customer Account
You have the option to register on our website and create a customer account. The personal data required for registration (such as your name, postal address, and email address) is clearly marked in the registration form.
The personal data stored in your customer account is used to save you from having to re-enter your information each time you visit our website or place future orders, thereby making the ordering process faster and more convenient. Your customer account is protected by a password that you choose.
You may delete your customer account and withdraw your consent at any time. Upon receipt of your request, we will permanently delete the personal data stored in your customer account, unless we are required to retain certain information to comply with statutory retention obligations.
To request deletion of your customer account, simply contact us using the contact details provided in the Legal Notice (Imprint). Requests may also be submitted by email.
The processing and storage of your personal data is based on Article 6(1)(a) of the General Data Protection Regulation (GDPR), as part of your previously provided consent, and on Article 6(1)(b) GDPR for the purpose of performing the contract.

4. Data Retention and Deletion

We generally store personal data only for as long as necessary to fulfill the purpose for which you provided us with the data. Once this purpose has been fulfilled, the data will be permanently deleted.
However, if statutory retention periods require us to retain personal data, we will store the data for as long as we are legally obligated to do so. Such obligations generally arise from legal documentation and retention requirements, which are regulated, among others, in the German Commercial Code (Handelsgesetzbuch – HGB) and the German Fiscal Code (Abgabenordnung – AO). For tax-related purposes, retention periods may be up to ten years.
After the statutory retention period has expired, the data will be permanently deleted.
Any consent you have provided for the processing and storage of your personal data pursuant to Article 6(1)(a) GDPR may be withdrawn at any time. As a result, your data will be permanently deleted, unless statutory retention obligations prevent such deletion.
Further rights allowing you to object to the processing of your personal data arise from Article 21(1) and Article 21(2) GDPR.
Information regarding your right to object can be found in this Privacy Policy under the section “Right to Object”.

5. Disclosure of Personal Data to Third Parties

We only disclose your personal data to third parties if:

You have given your explicit consent to such disclosure in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR);
The disclosure is necessary to protect our legitimate interests or those of a third party pursuant to Article 6(1)(f) GDPR, for example to exercise, assert, or defend legal claims, provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not prevail;
We are legally obliged to disclose the data pursuant to Article 6(1)(c) GDPR;
The disclosure is required for payment processing purposes pursuant to Article 6(1)(b) GDPR to the payment service provider commissioned with processing payments, and pursuant to Article 6(1)(f) GDPR based on our legitimate interest in providing reliable and secure payment processes; or
The disclosure is legally permissible and necessary pursuant to Article 6(1)(b) GDPR for the performance of contractual obligations with you, such as providing your address details to a transport company for delivery purposes. Personal data may also be disclosed to a dropshipping partner who ships goods to you on our behalf.
If you place an order and request delivery to an address other than your own, the disclosure of your data is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the proper processing and fulfillment of the contractual relationship.

Where required, a Data Processing Agreement (DPA) has been concluded with the service provider engaged by us in accordance with Article 28(3) GDPR.
If personal data of customers is processed in a third country (outside the European Union), such processing is carried out based on the customer’s previously provided consent, for the performance of a contract, or due to legal obligations. Any possible transfer of personal data takes place in compliance with applicable legal requirements. In particular, the provisions of Articles 44 to 49 GDPR apply.
As a general rule, transfers of personal data are based on an adequacy decision issued by the European Commission. If the third country concerned is not covered by an adequacy decision, data transfers are based, among other things, on the Standard Contractual Clauses (SCCs) provided by the European Commission as appropriate safeguards for the protection of personal data:
https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en
On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (DPF), which replaced the former Privacy Shield framework. The DPF now serves as a legal basis for transfers of personal data to certified organizations in the United States without the need for additional transfer mechanisms or supplementary measures.
Within this Privacy Policy, we will provide appropriate information whenever a service provider is certified under the EU-U.S. Data Privacy Framework.

6. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the host provider’s servers, which may be located in the United States. This data may include, in particular, IP addresses, contact requests, communication data, contract data, contact details, website access data, and other information generated through the use of a website.
Our hosting provider will only process your data to the extent necessary to fulfill its contractual obligations and will process such data in accordance with our instructions. A Data Processing Agreement (DPA) has been concluded with the hosting provider in accordance with Article 28(3) GDPR.
The use of the hosting provider is based on Article 6(1)(b) GDPR for the purpose of fulfilling contracts with our prospective and existing customers and on Article 6(1)(f) GDPR based on our legitimate interest in providing our online services in a secure, fast, and efficient manner.

Hoster:
domainfactory
We host our website with the following service provider:
domainfactory GmbH
Neuturmstraße 5, c/o WeWork
80331 Munich, Germany
According to domainfactory, web server log files are deleted after 7 days, FTP log files after 24 hours, and SSH log files after 3 days.
Further information on domainfactory’s data protection practices can be found at:
https://www.df.eu/en/privacy-policy/

7. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device, do not contain viruses, Trojans, or other malicious software. Information is stored in the cookie that is related to the specific device being used.

Essential cookies are used for the operation of the website, which ensure the smooth functioning of the website and do not require consent. The use of these cookies serves to make the use of our services more convenient for you. For example, we use so-called session cookies. A session ID is generated that assigns the session to the user and is stored temporarily. This allows multiple windows of our website to be opened and assigned to the same user; login data or the contents of the shopping cart are thus retained. Session cookies are deleted when the browser is closed.

Furthermore, we may use functional cookies. These cookies store the settings you made during your last visit to the website, such as language selection or internal bookmarks, so that they do not have to be selected again. Future visits to our website can thus be made more convenient.

In addition, so-called performance cookies may be used. These contain information about how our website is used. For example, we can see how often and for how long our website is visited and which subpages are accessed. This allows us to see which areas of our website are particularly interesting to users. Performance cookies enable the analysis of your browsing behavior for the purpose of optimizing our online services. It is not possible to draw conclusions about you as a user.

Marketing cookies from third-party providers may be set on your device. The purpose is to analyze user behavior across multiple websites over an extended period of time as part of online marketing in order to place personalized advertising accordingly.

You can configure your browser settings according to your preferences and refuse the acceptance of cookies. Please note that you may not be able to use all functions of this website in that case.

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

The use of cookies is based either on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or within the scope of our legitimate interests in a functional website pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

8. Payment Service Providers

The processing of personal data by payment service providers is carried out on the basis of Article 6(1)(b) GDPR for the purpose of processing contractual transactions and only to the extent necessary for this purpose. In addition, processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR in providing you with reliable and secure payment processes.
The respective payment service provider is responsible for ensuring that the personal data collected and processed by them is handled in compliance with applicable data protection regulations.
You may withdraw your consent to the processing of your personal data at any time by contacting the respective payment service provider directly.

PayPal
When you choose a payment method provided by PayPal (such as direct debit, credit card, installment payments, or purchase on account), payment processing is carried out by the payment service provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
(hereinafter referred to as “PayPal”).
If you select a PayPal payment method, you will be redirected to PayPal’s website. For the purpose of providing its services, PayPal collects, processes, and stores transaction-related data, including login and contact details, identification and signature data, payment information, the amount paid, technical usage data, and location data.
For the payment methods mentioned above, PayPal reserves the right to carry out a credit check where legally permissible. For this purpose, your payment data may be transferred to credit reference agencies pursuant to Article 6(1)(f) GDPR, based on PayPal’s legitimate interest in assessing your ability to meet payment obligations.
Further information on data protection at PayPal can be found in PayPal’s Privacy Policy:
https://www.paypal.com/myaccount/privacy/privacyhub

Klarna Sofortüberweisung
Wählen Sie die Zahlungsoption Klarna Sofortüberweisung, so erfolgt die Zahlungsabwicklung über die Sofort GmbH, Theresienhöhe 12, 80339 München, Deutschland. Die Sofort GmbH ist eine Tochter der Klarna Bank AB (publ), eine Gesellschaft schwedischen Rechts mit Hauptgeschäftssitz in Sveavägen 46, 111 34 Stockholm, Schweden.
Bei der Sofortüberweisung werden Sie nach entsprechender Auswahl auf die sichere Bezahlseite der Sofort GmbH weitergeleitet. Diese leitet als technischer Dienstleister die Daten, die Sie in das gesicherte Zahlformular eingegeben haben, verschlüsselt an Ihre Bank weiter. Hierzu erhebt, verarbeitet und speichert die Sofort GmbH Ihren Namen, IBAN, Betreff, Betrag und das Datum. Nach Abschluss der Überweisung erhalten wir eine Echtzeit-Transaktionsbestätigung.
Die Datenschutzerklärung der Sofort GmbH ist abrufbar unter:
https://www.sofort.de/datenschutz.html
Die Datenschutzerklärung von Klarna ist abrufbar unter:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Klarna Purchase on Invoice / Installment Payment
If you select Klarna Purchase on Invoice or Klarna Installment Payment as your payment option, payment processing is carried out by:
Klarna Bank AB (publ)
a company incorporated under Swedish law
Sveavägen 46
111 34 Stockholm, Sweden.
If you choose Klarna Purchase on Invoice or Klarna Installment Payment, you will be redirected to Klarna’s website. Klarna collects, processes, and stores, among other things, contact and identification information, such as your name, billing address, and email address, payment information, such as debit or credit card details and bank account information, as well as device-related information, such as your IP address and browser settings.
For purchases on invoice and installment payments, Klarna may transfer your personal data, such as your name, address, date of birth, and telephone number, to credit reference agencies as part of its credit assessment process pursuant to Article 6(1)(f) GDPR. This is based on Klarna’s legitimate interest in assessing your ability to meet payment obligations.
Klarna may also provide your data to selected third parties, which may be located outside the European Union (EU) or European Economic Area (EEA). Your creditworthiness is assessed by Klarna in real time, and you will immediately receive confirmation as to whether payment by installment or invoice is available to you.
Klarna’s Privacy Policy is available at:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Klarna Direct Debit
If you select Klarna Direct Debit as your payment option, you authorize Klarna to collect the outstanding invoice amount directly from your bank account. To do so, you must link your bank account with Klarna.
Payment processing is carried out by:
Klarna Bank AB (publ)
a company incorporated under Swedish law
Sveavägen 46
111 34 Stockholm, Sweden.
If you choose Klarna Direct Debit as your payment method, Klarna collects, processes, and stores, among other things, contact and identification information, such as your name, billing address, and email address, payment information, such as debit or credit card details and bank account information, as well as device-related information, such as your IP address and browser settings.
When paying by direct debit, Klarna may transfer your personal data, such as your name, address, date of birth, and telephone number, to credit reference agencies as part of its credit assessment process pursuant to Article 6(1)(f) GDPR. This is based on Klarna’s legitimate interest in assessing your ability to meet payment obligations.
Klarna’s Privacy Policy is available at:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

9. Credit Checks

We do not obtain creditworthiness information from business information service providers ourselves.
Please note that when selecting certain payment methods provided by external payment service providers (e.g., PayPal), these providers may independently carry out credit checks. Further information on this can be found in the privacy notices of the respective payment service providers.

10. Analytics Services

The tracking measures described below and used by us are carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.
The tracking measures we use are intended to ensure that our website is designed to meet users’ needs and is continuously improved. In addition, we use tracking measures to statistically analyze the use of our website and to evaluate this data in order to optimize our services and offerings for you.
Where required, a Data Processing Agreement (DPA) has been concluded with the service provider engaged by us in accordance with Article 28(3) GDPR.
You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. However, please note that in this case, certain functions of this website may not be fully available.
Unless otherwise stated regarding the storage period, the collected data will be stored for a period of two years and then deleted.
General information on usage-based online advertising can be found at the following link:
https://www.youronlinechoices.com/de/

Google Analytics
We use Google Analytics 4 on our website, a web analytics service provided by Google LLC. The responsible entity for data processing in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
(hereinafter referred to as “Google”).
We use Google’s Consent Mode with a basic implementation. If you have not given your consent pursuant to Article 6(1)(a) GDPR, the loading of Google tags is blocked and no data is transmitted to Google (including your consent status).
If you have provided your consent, Google tags are loaded for analysis and marketing purposes in order to understand user behavior on our website.
This analytics tool uses cookies, scripts, and pixels, which are evaluated algorithmically with the support of artificial intelligence to measure user behavior. In this context, the following types of data may be processed and stored, among others:
Duration of visits and pages viewed on our website
Browser used
Date and time of the page visit
Language settings
Interactions such as scrolling to the end of a page or clicks on external links
On behalf of the operator of this website, Google will use this information to evaluate website usage, compile reports on website activities, and provide further services related to website and internet usage to the website operator.
The stored data will be deleted no later than 14 months after collection.
Based on location data derived from and transmitted through the IP address, data from devices located within the EU is collected via domains and servers located in the EU. However, data may also be transferred in encrypted form to Analytics processing servers in the United States.
According to Google, IP addresses collected from users within the EU are deleted before being recorded via EU domains and servers. IP anonymization is activated automatically, and Google states that IP addresses are neither logged nor stored.
Google is certified under the EU-U.S. Data Privacy Framework.
The legal framework for data transfers by Google, as well as the European Commission’s Standard Contractual Clauses, can be found at:
https://policies.google.com/privacy/frameworks
Further information on Google’s Privacy Policy and terms of use is available at:
https://policies.google.com/privacy
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=de
You can adjust your settings regarding personalized advertising by Google at any time: https://www.google.com/settings/ads/onweb

Meta Pixel / Facebook Pixel, Custom Audiences, and Facebook Conversion Tracking
We use the so-called Meta Pixel (formerly Facebook Pixel) on our website, an analytics tool provided by the social network Facebook. It is operated by:
Meta Platforms Inc.
1 Meta Way
Menlo Park, CA 94025, USA
or, if you are located in the European Union:
Meta Platforms Ireland Limited
4 Grand Canal Square
Dublin 2, Ireland.
The Meta Pixel tracks user behavior on our website using so-called events. A pixel event is additional information that provides details about the data transmitted to Meta. Events enable Meta to identify which actions have been performed on our website (such as purchases, registrations, leads, searches, or similar activities).
The Meta Pixel is implemented on our website in standard mode (first-party cookie).
Furthermore, we can determine whether customers have been redirected to our website from a Facebook advertisement and whether they have performed certain actions there (so-called conversions), such as purchasing a specific product. This allows us to statistically evaluate the effectiveness of our advertisements based on conversion data.
Third parties, including Meta, may use cookies, web beacons, and other storage technologies to collect or receive information from our website and other locations on the internet. This information may then be used to provide measurement services, enable ad targeting, and deliver advertisements.
Details on how the Meta Pixel works can be found in Facebook’s Help Center at:
https://www.facebook.com/business/help/651294705016616

To the extent provided for in Meta’s terms and conditions, we are jointly responsible with Meta Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, for the data transmitted through the Meta Pixel:
https://de-de.facebook.com/legal/terms/businesstools
We have entered into an agreement with Meta Ireland pursuant to Article 26 GDPR regarding joint controllership:
https://www.facebook.com/legal/controller_addendum.

If you have previously provided your consent, we may transmit customer information to Meta as part of the so-called Custom Audiences feature. Based on the information received, Meta can assign visitors to our online services to specific target groups and display tailored advertisements to these users (so-called Ads).
This allows advertisements, including cross-device advertising, to be shown only to users who have already shown an interest in our products.
Furthermore, we can determine whether customers were redirected to our website from a Facebook advertising page and whether they carried out certain actions (so-called conversions), such as purchasing a specific product. This enables us to statistically evaluate the effectiveness of our advertisements based on conversion data.
As part of the Advanced Matching feature, users’ personal data may be collected and transferred to Meta’s servers, which may be located in the United States. Meta is certified under the EU-U.S. Data Privacy Framework.
To the extent provided for in Meta’s terms and conditions, Meta Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, acts as a data processor.

Meta may link the collected data to the user’s Facebook account if the user is registered with Facebook. Even if you are not registered with Facebook, Meta may still process and store certain data (including your IP address).
Meta retains information for as long as it is necessary to provide its products, comply with legal obligations, or protect its own interests or the interests of others. Meta stores event data for a maximum period of two years.
You can object to the collection of data by the Meta Pixel and the use of your data for displaying Facebook Ads. You can also manage your advertising preferences, including which types of advertisements you would like to see on Facebook, at:
https://www.facebook.com/settings?tab=ads
Further information about Meta’s Data Policy is available at:
https://www.facebook.com/about/privacy/

11. Social Media Services

We use social media plugins on our website based on our legitimate interests pursuant to Article 6(1)(f) GDPR in order to increase awareness of our website and make our content more widely known.
When you visit a page on our website that contains a social media plugin, a connection is established with the respective social media network. In this process, a so-called cookie (see section “Cookies” in this Privacy Policy) may be stored on your device.
The information generated by the cookies regarding your use of this website, such as your IP address, device information, and location data, may be transmitted directly to the provider’s servers, which may be located in the United States, and stored there.
Through this integration, the provider receives information that your browser has accessed the relevant page of our website, even if you do not have a user account with that provider or are not currently logged in.
The provider may use the information received for advertising purposes, market research, and the needs-based design and optimization of its services.

If you are logged in to an account with the respective provider, the provider may directly associate your visit to our website with your user account. If you interact with the plugins, for example by clicking a button, this information is also transmitted directly to a server of the respective provider and stored there.
The information may also be published on your user account and displayed to your contacts. The respective provider may use this information for advertising purposes, market research, and the needs-based design and optimization of its services.
If you do not want the provider to associate the data collected through our website directly with your user account, you should log out of your account with the respective provider before visiting our website.
Please note that, as the website operator, we have no knowledge of the content of the transmitted data or how it is used by the respective provider.
You may object to the processing of your data by the respective provider at any time.

Social Networks:

Facebook
We use social media plugins from the social network Facebook, which is operated by:
Meta Platforms Inc.
1 Meta Way
Menlo Park, CA 94025, USA
or, if you are located in the European Union:
Meta Platforms Ireland Limited
4 Grand Canal Square
Dublin 2, Ireland.
Meta retains information for as long as necessary to provide its products, comply with legal obligations, or protect its own interests or the interests of others. Meta stores event data for a maximum period of two years.
Meta is certified under the EU-U.S. Data Privacy Framework.
Further information on Facebook’s Privacy Policy is available at:
https://www.facebook.com/about/privacy/

Instagram
We use social media plugins from the social network Instagram. Instagram services are provided by:
Meta Platforms Inc.
1 Meta Way
Menlo Park, CA 94025, USA.
If you are located in the European Union, the data controller responsible for processing is:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland.
Meta retains information for as long as necessary to provide its products, comply with legal obligations, or protect its own interests or the interests of others. Meta stores event data for a maximum period of two years.
Meta is certified under the EU-U.S. Data Privacy Framework.
Further information on Instagram’s Privacy Policy is available at:
https://help.instagram.com/155833707900388

12. Other Online Services

On our website, we use online services and advertising tools provided by the companies listed below, either based on your consent pursuant to Article 6(1)(a) GDPR or based on our legitimate interest in optimally marketing our services and offerings pursuant to Article 6(1)(f) GDPR.
Where required, we have concluded a Data Processing Agreement (DPA) with the service provider engaged by us in accordance with Article 28(3) GDPR.
You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. However, please note that in this case, certain functions of this website may not be fully available.

Google Maps
This website uses maps provided by the Google Maps service. The provider is:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
If you are located in the European Union, the data controller responsible for processing is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
(hereinafter referred to as “Google”).
The use of Google Maps enables us to provide information about locations and offer directions, thereby making our services more user-friendly. The data processed may include IP addresses and location data, unless you have declined your consent accordingly.
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=en
If you do not agree to the display of personalized advertising, you can disable it at:
https://www.google.com/settings/ads/onweb
Google LLC is certified under the EU-U.S. Data Privacy Framework.
Google stores collected data for different periods of time depending on the type of data, how Google uses it, and the settings configured by users. Advertising data in server logs is anonymized by Google by removing parts of the IP address after 9 months and deleting cookie information after 18 months.
Further information on Google’s Privacy Policy and terms of use is available at:

https://www.google.com/policies/privacy/
https://policies.google.com/technologies/retention?hl=de

Google Fonts
This website uses fonts provided by Google Fonts. The provider is:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
If you are located in the European Union, the data controller responsible for processing is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
(hereinafter referred to as “Google”).
When you access our website, a connection is established with Google’s servers. The font data required for displaying the fonts is stored in your browser’s cache and may be stored for up to one year (depending, among other factors, on how frequently you clear your browser cache).
As a result, personal data, such as your IP address or the browser you use, may be transmitted to Google’s servers, which may be located in the United States.
The purpose of integrating Google Fonts is to ensure an appealing presentation of our online services and to improve loading speed.
The use of Google Fonts is based on our legitimate interest in providing an attractive presentation of our online services pursuant to Article 6(1)(f) GDPR.
Google LLC is certified under the EU-U.S. Data Privacy Framework.
Google stores collected data for different periods of time depending on the type of data, how Google uses it, and the settings configured by users. Advertising data in server logs is anonymized by Google by removing parts of the IP address after 9 months and deleting cookie information after 18 months.
Further information about Google’s privacy practices and terms of use is available at:

https://www.google.com/policies/privacy/
https://policies.google.com/technologies/retention?hl=de

Google reCAPTCHA
This website uses the “reCAPTCHA” function to detect bots (for example, when entering information into online forms such as our contact form). The provider is:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
If you are located in the European Union, the data controller responsible for processing is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
(hereinafter referred to as “Google”).
A CAPTCHA service is an automated Turing test designed to determine whether an action on the internet is being performed by a human rather than by a bot.
The data processed may include IP addresses and, where applicable, additional data required by Google for the reCAPTCHA service. This data may be transmitted to Google servers, which may be located in the United States.
The use of Google reCAPTCHA is based on your consent pursuant to Article 6(1)(a) GDPR.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=en
If you do not agree to the display of personalized advertising, you can disable it at:

https://www.google.com/settings/ads/onweb

Google LLC is certified under the EU-U.S. Data Privacy Framework.
Google stores collected data for different periods of time depending on the type of data, how Google uses it, and the settings configured by users. Advertising data in server logs is anonymized by Google by removing parts of the IP address after 9 months and deleting cookie information after 18 months.
Further information about Google’s privacy practices and terms of use is available at:
https://www.google.com/policies/privacy/
https://policies.google.com/technologies/retention?hl=de

YouTube
We integrate online content (generally videos) from the YouTube platform into our website. The provider is:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
If you are located in the European Union, the data controller responsible for processing is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
(hereinafter referred to as “Google”).
The operator of the YouTube platform is:
YouTube LLC
901 Cherry Ave
San Bruno, CA 94066, USA.
We have activated YouTube’s “enhanced privacy mode”, which blocks the setting of YouTube cookies. When you visit a page on our website that contains an embedded YouTube video, no connection is established with YouTube’s servers at this stage.
Only after you have previously provided your consent pursuant to Article 6(1)(a) GDPR will data be transmitted to Google. In this context, a connection may also be established with Google’s DoubleClick network, an advertising tool provided by Google.
In this context, Google may store cookies on your device, in particular:
YSC – session-based identifier used to generate video statistics
VISITOR_INFO1_LIVE – stores user preferences (retention period: up to 6 months)
VISITOR_PRIVACY_METADATA – stores session and privacy settings
__Secure-ROLLOUT_TOKEN – unique identifier for statistical analysis of video views (retention period: up to 180 days)
Data (including your IP address) may be transmitted directly to Google servers, which may be located in the United States, and stored there.
Google may use cookies (see Section 7 “Cookies”) to analyze your user behavior on your device and may associate this data with your Google account if you are logged in to a Google service. Even if you do not have a user profile or are not currently logged in, Google may still process the data received.

https://support.google.com/youtube/answer/9315727?hl=de

Google LLC is certified under the EU-U.S. Data Privacy Framework.
Google stores collected data for different periods of time depending on the type of data, how Google uses it, and the settings configured by users. Advertising data in server logs is anonymized by Google by removing parts of the IP address after 9 months and deleting cookie information after 18 months.
Further information about Google’s privacy practices is available at:
https://policies.google.com/privacy
https://policies.google.com/technologies/retention?hl=de

Vimeo
We integrate videos from the Vimeo platform into our website. The provider is:
Vimeo.com, Inc.
330 West 34th Street
5th Floor
New York 10001, USA.
This allows us to provide you with access to interesting content in high video quality. The videos are set to inactive mode, meaning that no data is transmitted to Vimeo when you visit our website.
Only when you click on the respective video will data (including your IP address) be transmitted to Vimeo servers, which may be located in the United States. This also informs Vimeo which pages of our website you have visited.
If you are logged into your Vimeo account while visiting our website, Vimeo may associate the transmitted data with your user account. The playback of a video may also be directly assigned to your user account.
If you do not want Vimeo to associate the data collected through our website with your user account, you should log out of your Vimeo account before visiting our website.
Vimeo may use this information, among other things, to improve user experience and ensure quality standards. Please note that we, as the website operator, have no knowledge of the content of the transmitted data or how it is used by Vimeo.
Vimeo deletes or anonymizes stored data when there is no longer a business-related reason for retaining it.
Further information about Vimeo’s privacy practices is available at:
https://vimeo.com/privacy

Review Tool
You have the option to submit a review of our service and the products purchased from us. After completing a contract, you can rate the transaction and, if desired, add comments.
For this purpose, we work with a third-party provider. In this context, personal data such as your name, email address, invoice number, and your review may be transmitted. The transmission of additional data, such as your IP address, may also occur.
The use of a review system serves the purpose of optimizing our services and strengthening customer trust.
To inform you about this option, we or the provider may contact you during the purchasing process, provided that you have given your prior consent. This is done in the interest of obtaining authentic and reliable reviews.
Data received by the provider on our behalf based on a review invitation will be automatically deleted no later than 90 days after receipt.

Provider:
Geprüfter Webshop
We use the review tool provided by:
Tisko Consulting GmbH
Hertzstr. 15
53881 Euskirchen
Germany.
Further information about data protection at Tisko Consulting GmbH is available at:
https://www.gepruefter-webshop.de/datenschutz/

Gütesiegel Geprüfter Webshop
Auf unserer Webseite ist das Siegel „Geprüfter Webshop“ eingebunden. Das Siegel und die damit beworbenen Dienste sind ein Angebot der Tisko Consulting GmbH, Hertzstr.15, 53881 Euskirchen. Bei dem Aufruf des Siegels speichert der Webserver automatisch ein sog. Server-Logfile, das z.B. Ihre IP-Adresse, Datum und Uhrzeit des Abrufs, übertragene Datenmenge und den anfragenden Provider (Zugriffsdaten) enthält und den Abruf dokumentiert. Diese Zugriffsdaten werden nicht ausgewertet und spätestens 30 Tage nach Ende Ihres Seitenbesuchs automatisch gelöscht.
Weiteren Informationen über den Datenschutz der Tisko Consulting GmbH erhalten Sie unter:
https://www.gepruefter-webshop.de/datenschutz/

13. Data Subject Rights

You have the following rights::

Pursuant to Article 15 GDPR, you have the right to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected directly from you, and the existence of automated decision-making, including profiling, as well as meaningful information about the details involved.
Pursuant to Article 16 GDPR, you have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data stored by us.
Pursuant to Article 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Pursuant to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you refuse the erasure of the data, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR.
Pursuant to Article 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request that we transmit this data to another controller.
Pursuant to Article 7(3) GDPR, you have the right to withdraw your consent at any time with effect for the future. As a consequence, we may no longer continue the data processing based on this consent.
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. As a general rule, you may contact the supervisory authority of your habitual place of residence, your place of work, or our company’s registered office.

14. Right to Object

If your personal data is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right, pursuant to Article 21(1) GDPR, to object to the processing of your personal data if there are reasons arising from your particular situation.
Following your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
You also have the right to object pursuant to Article 21(2) GDPR to the processing of your personal data by us for the purposes of direct marketing, where such processing is based on Article 6(1)(f) GDPR. In this case, we will no longer process your personal data for direct marketing purposes.
If you wish to exercise your right of withdrawal or objection, it is sufficient to send an email to the email address provided in our legal notice (Imprint).

15. Data Security

During your visit to our website, we use the widely used SSL (Secure Socket Layer) procedure in combination with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.
You can recognize whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser.
In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.
Our security measures are continuously improved in accordance with technological developments.

16. Updates and Amendments to this Privacy Policy

This Privacy Policy is currently valid.
Due to the ongoing development of our website and our services, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
The current version of this Privacy Policy can be accessed and printed by you at any time on this website.
This Privacy Policy was prepared by the contract lawyers of TISKO Consulting GmbH (www.Gepruefter-Webshop.de) and is protected by copyright. Any use beyond the scope of the contractual agreement, as well as the copying or unauthorized use of these texts, is not permitted and constitutes a copyright infringement that may be subject to legal action.

Cancel contract