1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Veddelholzer Corporation LTD, email: service@veddelholzer.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser address bar.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website you visited
• Date and time of access
• Amount of data transmitted in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting

Hosting by Shopify
We use the online store system provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online store on a processing-on-our-behalf basis. All data collected on our website is processed on Shopify’s servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada; Shopify Data Processing (USA) Inc.; Shopify Payments (USA) Inc.; or Shopify (USA) Inc. as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, an adequacy decision by the European Commission ensures an adequate level of data protection. For more information on Shopify’s data protection practices, please visit the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify takes place only within the scope described below.

4) Cookies

To make your visit to our website more engaging and to enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information—such as browser and location data, as well as IP addresses—to the extent applicable to each individual user. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie. You can find the storage duration of each cookie in the overview of your web browser’s cookie settings.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies we use, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR if consent has been given, or in accordance with Article 6( 1(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a user-friendly and effective experience for visitors.

Please note that you can configure your browser to notify you when cookies are set and to allow you to decide individually whether to accept them, or to block the acceptance of cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using a contact form is indicated on the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it is evident from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.

6) Data Processing When Opening a Customer Account and for Contract Fulfilment

In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of performing a contract or when opening a customer account. The specific data collected is indicated in the respective input forms. You may delete your customer account at any time by sending a message to the controller’s address listed above. We store and use the data you provide for the purpose of contract fulfillment. After the contract has been fully fulfilled or your customer account has been deleted, your data will be blocked in accordance with retention periods under tax and commercial law and will be deleted upon the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law.

7) Comment Function

When using the comment feature on this website, in addition to your comment, information regarding the time the comment was posted and the username you selected will be stored and published on this website. Furthermore, your IP address is also logged and stored. This IP address is stored for security reasons and in the event that the data subject infringes the rights of third parties through a submitted comment or posts unlawful content. We need your email address to contact you in the event that a third party complains that your published content is unlawful. The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

8) Use of Customer Data for Direct Marketing

8.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for receiving the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of your subscription, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending you promotional communications via the newsletter. You can unsubscribe from the newsletter at any time by clicking the link provided in the newsletter or by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

8.2 Newsletter Distribution via Klaviyo

Our email newsletters are sent via the technical service provider “Klaviyo,” 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we transfer the data you provided when you subscribed to the newsletter. This transfer is carried out in accordance with Art. 6(1)(f) of the GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the U.S. and stored there.

Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
To protect your data in the U.S., we have entered into a Data Processing Agreement with Klaviyo, in which Klaviyo commits to protecting our users’ data, processing it on our behalf in accordance with its privacy policy, and, in particular, not disclosing it to third parties.

You can view Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy

8.3 Email Notifications Regarding Product Availability

If we offer the option in our online store for selected items that are temporarily out of stock to notify you via email when they become available, you can sign up for our email notification service regarding product availability. If you sign up for our email notification service for product availability, we will send you a one-time email notification regarding the availability of the item you have selected. The only required information for sending this notification is your email address. Providing additional information is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send this notification. This means that we will only send you a notification once you have explicitly confirmed that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on a corresponding link.

By activating the confirmation link, you grant us your consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you sign up for our email notification service regarding product availability, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service regarding product availability is used exclusively for the purpose of informing you about the availability of a specific item in our online store. You may unsubscribe from the email notification service for product availability at any time by sending a message to the data controller named above. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

9) Data Processing for Order Fulfilment

9.1 To the extent necessary for the fulfillment of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the contracted shipping company and the contracted financial institution in accordance with Article 6(1)(b) of the GDPR.

If, based on a corresponding contract, we are obligated to provide updates for goods with digital elements or for digital products, we will process the contact information you provided when placing your order (name, address, email address) to personally inform you, within the scope of our statutory information obligations pursuant to Article 6(1)(c) of the GDPR, via an appropriate communication channel (such as by mail or email) about upcoming updates within the period prescribed by law. Your contact information is used strictly for the specific purpose of notifying you about updates we are obligated to provide and is processed by us for this purpose only to the extent necessary to provide the respective information.

To process your order, we also work with the service provider(s) listed below, who assist us, in whole or in part, with the fulfillment of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

9.2 Use of Specific Service Providers for Order Processing and Fulfillment

- Amazon Fulfillment (FBA)
Order fulfillment is handled by the service provider “Amazon” (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) as part of the “Fulfillment by Amazon” (= Fulfillment by Amazon). Your personal data is transferred to Amazon exclusively for the purpose of processing the online order. The transfer is carried out in accordance with Art. 6(1)(b) of the GDPR and only to the extent necessary for order processing. Details regarding Amazon’s data protection practices and its privacy policy can be viewed at the following link: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
- Billbee
Order processing is handled by the service provider “Billbee” (Billbee GmbH, Arolser Str. 10, 34477 Twistetal). Your name, address, and, if applicable, other personal data are transferred to Billbee in accordance with Article 6(1)(b) of the GDPR exclusively for the purpose of processing your online order. Your data is transferred only to the extent that it is actually necessary for order processing. Details regarding Billbee’s data protection practices and its privacy policy can be found on Billbee’s website at “billbee.io.”

9.3 Use of Payment Service Providers

- Klarna
If you select a Klarna payment service, payment processing is handled by Klarna Bank AB (publ), https://klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). To enable payment processing, your personal data (first and last name, street, house number, ZIP code, city, gender, email address, phone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) will be shared with Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this during the ordering process in accordance with Article 6(1)(a) of the GDPR. You can view which credit bureaus your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called “score” values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of these score values includes, among other things but not exclusively, address data. Klarna uses the information obtained regarding the statistical probability of default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You may revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
Your personal data will be processed in accordance with applicable data protection regulations and as specified in Klarna’s Privacy Policy for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or, for data subjects residing in Austria, https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we will transfer your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”), for the purpose of payment processing. This transfer is made in accordance with Art. 6(1)(b) of the GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be transferred to credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—which reflects the statistical probability of default—to determine whether to make the respective payment method available. The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data. For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Shopify Payments
We use the payment service provider “Shopify Payments,” 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will disclose the information you provided during the ordering process, along with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Article 6(1)(b) of the GDPR. Your data is transferred exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. For more information on Shopify Payments’ privacy policy, please visit the following website: https://www.shopify.com/legal/privacy.
For information on Stripe Payments Europe Ltd.’s privacy policy, please visit: https://stripe.com/de/privacy

10) Contact Regarding Review Reminders

Review reminder via Reviews.io
If you have given us your explicit consent for this purpose during or after your order in accordance with Art. 6(1)(a) GDPR, we will forward your email address to the review platform “reviews.io” operated by REVIEWS.io 2020 GmbH, Stralauer Allee 6, 10245 Berlin, so that it can send you a review reminder via email. You may revoke your consent at any time by sending a message to the data controller or directly to the review platform.

Review Reminder via Trusted Shops
If you have given us your explicit consent for this purpose during or after your order in accordance with Article 6(1)(a) of the GDPR, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder via email.
You may revoke your consent at any time by sending a message to the data controller or directly to the review platform.

11) Use of Review and Trust Seal Graphics

Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after they place an order.

This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the optimal marketing of our offerings, in accordance with Article 6(1)(f) of the GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file that contains, for example, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is not analyzed and is automatically overwritten no later than seven days after the end of your visit to the site.

Additional personal data is transmitted to Trusted Shops only if, after completing an order, you decide to use Trusted Shops products or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

12) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding feature to display and play videos from the provider “YouTube,” which is owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended privacy mode is used here, which, according to the provider’s information, only initiates the storage of user information once the video(s) are played. When playback of embedded YouTube videos begins, the provider “YouTube” uses cookies to collect information about user behavior. According to “YouTube,” this information is used, among other things, to compile video statistics, improve user experience, and prevent abusive behavior. If you are signed in to Google, your data will be directly associated with your account when you click on a video. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes this data. Such analysis is carried out in particular pursuant to Art. 6(1)(f) of the GDPR on the basis of Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring its website to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. When using YouTube, personal data may also be transferred to the servers of Google LLC in the United States.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.

For more information on data protection at “YouTube,” please see the YouTube Terms of Service at https://www.youtube.com/static?template=terms and Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy

To the extent required by law, we have obtained your consent for the processing of your data described above in accordance with Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, disable this service using the “Cookie Consent Tool” provided on the website.

13) Online Marketing

13.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies—text files stored on your computer—that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small invisible images) to collect information; these allow simple actions, such as visitor traffic on the website, to be recorded, collected, and analyzed.

The information generated by the cookie and/or web beacon (including your IP address) regarding your use of this website is generally transmitted to and stored on a Google server. This may also involve transmission to the servers of Google LLC in the United States.

Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other data held by Google. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.

Details regarding the data processing initiated by Google AdSense and Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites

The data processing described above is carried out in accordance with Article 6(1)(f) of the GDPR for the purpose of targeted advertising to the user by third-party advertisers, whose ads are displayed on this website based on analyzed user behavior. This processing also serves our financial interest in maximizing the economic potential of our website through the paid display of personalized third-party advertising content.

You can find more information about Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently disable cookies for advertising purposes by adjusting the settings in your browser software accordingly, or you can download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure described above for filing an objection.

13.2 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites through advertising (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are of interest to you, to make our website more appealing to you, and to ensure a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
When using Google Ads, personal data may also be transferred to the servers of Google LLC in the United States.
Details regarding the processing activities triggered by Google Ads conversion tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/Partner
Sites All processing described above, in particular the setting of cookies to read information from the device you are using, is carried out only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by disabling this service in the “Cookie Consent Tool” provided on the website.
You can also permanently opt out of the use of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
To deliver even more targeted advertising to users whose data we have obtained through business or business-like relationships, we use a customer matching feature within Google Ads. To this end, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and phone numbers) to Google. Google does not have access to plaintext data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then use the encrypted information solely to associate it with existing Google accounts that the data subjects have set up. This enables the display of personalized advertising across all Google services linked to the respective Google account.
Customer data is transmitted to Google only if you have given us your explicit consent to do so in accordance with Art. 6(1)(a) of the GDPR. You may revoke this consent at any time with future effect. Further information on Google’s data protection measures regarding the customer matching feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s Privacy Policy is available here: https://www.google.de/policies/privacy/

13.3 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Using a cookie ID, Google tracks which ads are displayed in which browser and can thus prevent them from being shown multiple times. This processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.

In addition, GMP can use cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later, while using the same browser, visits the advertiser’s website and makes a purchase through that website. According to Google, GMP cookies do not contain any personally identifiable information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows, based on our current knowledge: Through the integration of GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address. As part of the use of GMP, personal data may also be transferred to the servers of Google LLC in the United States.

If you wish to opt out of this tracking process, you can disable cookies for conversion tracking by configuring your browser to block cookies from the domain www.googleadservices.com (see https://www.google.de/settings/ads), although this setting will be deleted if you disable cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn about the use of cookies and configure your preferred settings. Finally, you can configure your browser to notify you when cookies are set and allow you to decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally. If you do not accept cookies, the functionality of our website may be limited.

You can find more information about GMP by Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure for objecting described above.

14) Web Analytics Services

14.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies,” which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website (including the truncated IP address) is generally transmitted to and stored on a Google server; this may also involve a transfer to the servers of Google LLC in the United States.
This website uses Google (Universal) Analytics exclusively with the “_anonymizeIp()” extension, which ensures that IP addresses are anonymized by truncation and precludes direct personal identification. With this extension, your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server operated by Google LLC in the United States and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not combined with other Google data.
Google Analytics also enables the creation of statistics regarding the age, gender, and interests of website visitors through a special feature known as “demographic characteristics,” based on an analysis of interest-based advertising and incorporating third-party information. This allows for the definition and differentiation of user groups on the website for the purpose of tailoring marketing measures to specific target audiences. However, data sets collected via “demographic characteristics” cannot be attributed to any specific individual.
Details regarding the processing activities initiated by Google Analytics and Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies to read information from the device you are using, will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please disable this service using the “Cookie Consent Tool” provided on the website. We have entered into a data processing agreement with Google regarding the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the U.S., Google relies on the European Commission’s so-called Standard Data Protection Clauses, which are intended to ensure compliance with European data protection standards in the U.S.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

14.2 Hotjar (Hotjar Ltd.)

This website uses the web analytics service Hotjar provided by Hotjar Ltd. Hotjar Ltd. is a European company headquartered in Malta (Hotjar Ltd., Level 2, St. Julians Business Center, 3 Elia Zammit Street, St. Julians STJ 1000, Malta, Europe; Tel.: +1 (855) 464-6788).
This tool allows us to track user movements on websites where Hotjar is used (so-called heatmaps). For example, it shows how far users scroll and which buttons they click and how often. Furthermore, the tool also allows us to collect feedback directly from website users. This provides us with valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests in optimization and marketing purposes and in designing our website to meet user needs, in accordance with Article 6(1)(f) of the GDPR. We take special care to protect your personal data when using this tool. For example, we can only track which buttons you click and how far you scroll. Areas of the website where your personal data or that of third parties is displayed are automatically hidden by Hotjar and are therefore never traceable.

Hotjar offers every user the option to prevent the use of the Hotjar tool by using a “Do Not Track header,” so that no data regarding visits to the respective website is recorded. This is a setting supported by all common browsers in their current versions. To do this, your browser sends a request to Hotjar instructing it to disable tracking for that user. If you use our website with different browsers or computers, you must set up the “Do Not Track header” separately for each of these browsers or computers.
Detailed instructions with information specific to your browser can be found at: https://www.hotjar.com/de/legal/policies/do-not-track/
For more information about Hotjar Ltd. and the Hotjar tool, please visit: https://www.hotjar.com
The Hotjar Ltd. Privacy Policy can be found at: https://www.hotjar.com/privacy

To the extent required by law, we have obtained your consent for the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure described above for filing an objection.

15) Retargeting/Remarketing/Referral Advertising

Google Ads Remarketing
Our website uses the features of Google Ads Remarketing; we use this to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.
Any further data processing takes place only if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the United States.
Details regarding the processing initiated by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently opt out of the use of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be viewed here:
https://www.google.com/policies/technologies/ads/
To the extent required by law, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, disable this service in the “Cookie Consent Tool” provided on the website or, alternatively, follow the procedure described above for objecting to the processing.

16) Use of a Live Chat System

Zendesk (formerly Zopim)
This website uses technologies provided by Zendesk International Ltd., 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland (“Zendesk”) for the purpose of web analytics and to operate the live chat system, which is used to respond to live support requests. Usage profiles may be created from this pseudonymized data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s internet browser. Among other things, cookies enable the recognition of the internet browser. If the information collected in this manner is personally identifiable, it is processed in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in providing effective customer service and conducting statistical analysis of user behavior for optimization purposes.
The data collected using Zendesk technologies will not be used to personally identify visitors to this website without the data subject’s separate consent, nor will it be merged with personal data regarding the holder of the pseudonym. To prevent the storage of Zendesk cookies, you can configure your web browser so that no further cookies can be stored on your computer in the future or so that cookies already stored are deleted. However, disabling all cookies may result in some functions on our website no longer being available. You may deactivate the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with future effect by sending us your objection informally via email to the email address listed in the legal notice.
We have entered into a data processing agreement with Zendesk, under which we require Zendesk to protect our customers’ data and not to disclose it to third parties.
Personal data may, where applicable, be transferred to servers operated by Zendesk Inc. in the United States. For such data transfers, Zendesk follows Binding Corporate Rules (BCR), which have been recognized by the Irish Data Protection Authority as appropriate safeguards for compliance with European data protection standards.
For more information on Zendesk’s data protection practices, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/.

17) Use of an Email Ticketing System

Zendesk
We use the Zendesk email ticketing system, a customer service platform provided by Zendesk International Ltd., 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland (“Zendesk”), to process customer inquiries. When users of our website submit contact requests via email, these are stored and organized in the ticketing system to enable chronological processing and improve the service experience. Users can always view the current status of their request using the individually assigned ticket number.
Solely for the purpose of organizing and processing inquiries, personal data—to the extent provided in the inquiry, but in any case including last name, first name, and email address—is collected, transmitted to Zendesk, stored there, and accessed.
The legal basis for processing this data is our legitimate interest in the efficient organization of our customer service, in responding to your inquiry as quickly as possible, and in optimizing our service offerings in accordance with Art. 6(1)(f) f of the GDPR
. We have entered into a data processing agreement with Zendesk, under which we require Zendesk to protect our customers’ data and not to disclose it to third parties.
Personal data may, where applicable, be transferred to servers operated by Zendesk Inc. in the United States. For such data transfers, Zendesk follows Binding Corporate Rules (BCR), which have been recognized by the Irish Data Protection Authority as appropriate safeguards for compliance with European data protection standards.
Your data will be deleted once your request has been fully processed. This occurs when the circumstances indicate that the matter in question has been fully resolved and provided that no legal retention requirements prevent this.
For more information about Zendesk’s data protection practices, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/.

18) Tools and Miscellaneous

18.1 - DATEV
We use the cloud-based accounting software from DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg (“DATEV”) to handle our accounting.
DATEV processes incoming and outgoing invoices as well as, where applicable, our company’s bank transactions in order to automatically record invoices, match them to the corresponding transactions, and use this data to generate financial accounting records through a semi-automated process.
To the extent that personal data is processed in this context, such processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in the efficient organization and documentation of our business processes.
For more information about DATEV, the automated processing of data, and the privacy policy, please visit https://www.datev.de/web/de/m/ueber-datev/datenschutz/

18.2 beeclever
To obtain valid user consent for cookies and cookie-based applications that require consent, this website uses the “GDPR Legal Cookie” consent tool provided by beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz a. Rh. (“beeclever”).
By embedding the corresponding JavaScript code, users are shown a banner when they visit the page, allowing them to grant consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. The tool blocks the setting of all cookies requiring consent until the respective user grants the appropriate consent by checking the boxes. This ensures that such cookies are set on the user’s device only after consent has been granted.
To enable the Cookie Consent Tool to uniquely assign page views to individual users and to individually record the consent settings selected by the user, log them, and store them for the duration of a session, certain user information (including the IP address) is collected by the Cookie Consent Tool when our website is accessed, transmitted to beeclever’s servers, and stored there.
This data processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.
Another legal basis for the data processing described above is Article 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of non-technically necessary cookies contingent upon the user’s consent.
For more information on beeclever’s use of data, please visit https://beeclever.de/pages/datenschutz

18.3 - Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) to ensure consistent font display. When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly.
To do this, the browser you are using must establish a connection to Google’s servers. This may also involve the transfer of personal data to the servers of Google LLC in the United States. In this way, Google becomes aware that our website has been accessed via your IP address. The processing of personal data in connection with establishing a connection to the font provider will only take place if you have given us your express consent in accordance with Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://www.google.com/policies/privacy/

18.4 Google reCAPTCHA

On this website, we also use the reCAPTCHA feature provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This feature is primarily used to distinguish whether an input is made by a natural person or is being made fraudulently through machine-based and automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6( 1(f) of the GDPR, based on our legitimate interest in establishing individual responsibility on the Internet and preventing abuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the United States.

Further information about Google reCAPTCHA and Google’s Privacy Policy can be found at: https://www.google.com/intl/de/policies/privacy/

To the extent required by law, we have obtained your consent pursuant to Article 6(1)(a) of the GDPR for the processing of your data as described above. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure described above for filing an objection.

18.5 Google Customer Reviews (formerly the Google Certified Merchant Program)

We collaborate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you provide your consent in accordance with Art. 6(1)(a) of the GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The review you submit will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. In addition, your review will be used for Google Merchant Reviews. As part of the use of Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the United States.

You can revoke your consent at any time by sending a message to the data controller or directly to Google.

You can find more information about Google’s privacy practices in connection with the Google Customer Reviews program at the following link: https://support.google.com/merchants/answer/7188525?hl=de

For more information on Google’s privacy practices regarding Google Merchant Reviews, please visit this link: https://support.google.com/google-ads/answer/2375474

18.6 - Microsoft Teams
We use the “Microsoft Teams” service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter “Microsoft Teams”) to conduct online meetings, video conferences, and/or webinars.
When using Microsoft Teams, various types of data are processed. The scope of the data processed depends on what information you provide before or during your participation in an online meeting, video conference, or webinar. When using Microsoft Teams, data from communication participants is processed and stored on Microsoft Teams servers. This data may include, in particular, your login credentials (name, email address, phone number (optional), and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, participants’ visual and audio contributions, as well as text entered in chats, may be processed.
When processing personal data necessary to fulfill a contract with you (this also applies to processing operations necessary to implement pre-contractual measures), Article 6(1)(b) of the GDPR serves as the legal basis. If you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. Consent that has been given may be revoked at any time with future effect.
Furthermore, the legal basis for data processing during the conduct of online meetings, video conferences, or webinars is our legitimate interest, pursuant to Article 6(1)(f) of the GDPR, in the effective conduct of the online meeting, webinar, or video conference. For more information on data usage by Microsoft Teams, please see the Microsoft Teams Privacy Statement at https://privacy.microsoft.com/de-de/privacystatement

18.7 Microsoft Power BI

For the internal visualization of business processes and for user-defined analyses of business processes, we use the “Microsoft Power BI” service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Where applicable, personal customer data may be subject to visualization and analysis processes and may be processed by Microsoft BI for this purpose. In this case, Microsoft processes personal data as a processor acting under our instructions in accordance with Article 28 of the GDPR and has contractually committed to us to protect this data in accordance with legal requirements. To this end, Microsoft uses state-of-the-art encryption methods and ensures that data processing operations take place exclusively in data centers within the EU.

You can find more information about the data protection measures for Power BI at https://www.microsoft.com/de-de/trustcenter/security/powerbi-security.

19) Rights of the Data Subject

19.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 of the GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 of the GDPR;
• Right to be informed pursuant to Article 19 of the GDPR;
• Right to data portability pursuant to Article 20 of the GDPR;
• Right to withdraw consent pursuant to Article 7(3) of the GDPR;
• Right to lodge a complaint pursuant to Article 77 of the GDPR.

19.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATING TO YOUR SPECIFIC SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

20) Retention Period for Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and—where applicable—the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) of the GDPR, this data is retained until the data subject revokes their consent.

If statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, such data is routinely deleted upon expiration of the retention periods, provided that it is no longer necessary for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data is stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Article 6(1)(f) of the GDPR, this data is retained until the data subject exercises their right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.