1) Information on the collection of personal data and contact details of the responsible person
1.1 We are pleased that you have visited our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Stella Maria Sorg, MERSOR GmbH, Anklamer Str. 38, 10115 Berlin, Germany, e-mail: firstname.lastname@example.org. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (eg orders or requests to the responsible person), this website uses SSL or TLS encryption. You can use an encrypted connection with the string "https: //" and the lock symbol in your browser.
2) Data collection when visiting our website
In the case of merely informative use of our website, e.g. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following information, which is technically necessary for us to be able to display the website:
- Our visited website
- Date and time at the time of access
- Amount of sent data in bytes
- Source / reference from which you came to the page
- Browser used
- Operating system used
- IP address used in anonymous form
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Hosting by Shopify
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, e.g. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process individual user information such as browser and location data and IP address values individually. Permanent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. saving the contents of a virtual shopping cart for a later visit to the website). Insofar as personal cookies are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the page visit.
We may work with advertising partners to make our website more interesting for you. For this purpose, in this case, cookies from partner companies are stored on your hard drive when you visit our website (third-party cookies). If we cooperate with above-mentioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this for the respective browser under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Please note that the functionality of our website may be limited if you do not accept cookies.
When contacting us (for example via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be found in the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims to conclude a contract, additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after the final processing of your request. This is the case if it is clear from the circumstances that the matter in question has been finally resolved and there are no legal retention obligations to the contrary.
6) Data processing when opening a customer account and for contract processing
Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiration of these periods, unless you have expressly consented to a further use of your data or a legally permitted further use of data was reserved by our side.
7) Use of your data for direct advertising
7.1 Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.
7.2 Newsletter dispatch via Klaviyo
Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f DSGVO and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. To protect your data in the USA, we have a data processing agreement with Klaviyo ("Data Processing Agreement"), in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.
7.3 Advertising by mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1) lit. f DSGVO and to use it to send you interesting offers and information about our products by letter post..
You can object to the storage and use of your data for this purpose at any time by notifying the person responsible.
8) Data processing for order processing
8.1 Transmission of image files for order processing via upload function
On our website, we offer customers the opportunity to order the personalization of products by submitting image files via an upload function. In doing so, the submitted image motif is used as a template for the personalization of the selected product. Using the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then record, store and use the transmitted files exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After final processing of the order, the transmitted image files will be automatically and completely deleted.
Transmission of image files for order processing by e-mail On our website, we offer customers the option to order the personalization of products by transmitting image files by e-mail. In doing so, the submitted image motif is used as a template for the personalization of the selected product.
The customer can transmit one or more image files from the memory of the end device used to us via the e-mail address provided on the website. We then collect, store and use the files thus transmitted exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After final processing of the order, the transmitted image files will be automatically and completely deleted.
8.2 Use of special partners and service providers for order processing and handling
To process your order, we work with partners and service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these partners or service providers in accordance with the following information. Our partners are subject to the guidelines of the DSGVO.
The personal data collected by us will be passed on to the company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b DSGVO. 8.3 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name as well as your delivery address and, if necessary for the delivery, your telephone number, exclusively for the purpose of the delivery of goods Art. 6 para. 1 lit. b DSGVO to a shipping partner selected by us
8.2.1 DHL (handling, shipping)
The order is processed by the service provider DHL Home Delivery GmbH, Sträßchensweg 10, 53113 Bonn, Germany, within the scope of "Shipping with DHL Fulfillment". Your personal data will be forwarded to DHL Fulfillment exclusively for the purpose of processing the online order in accordance with Art. 6 para. 1 lit. b The DSGVO was.
The shipment takes place via the shipping portal "SendCloud" (SendCloud GmbH, Kanalstr. 10, 80538 Munich). Pursuant to Art. 6 para. 1 lit. b DSGVO, we pass on your data to SendCloud exclusively for the purpose of processing your online order. A transfer will only take place insofar as this is actually necessary for the processing. Details on SendCloud's data protection can be viewed on SendCloud's website at www.sendcloud.de/datenschutz/. - Shopify Order Printer For the accounting and logistical organization of orders, we use the "Order Printer" service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the automated creation of invoices, receipts, shipping labels and other business documents. If personal order data is processed via the service for the preparation of these documents, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO exclusively for the proper processing of online orders.
8.3 Use of payment service providers (PSPs)
If you choose a Klarna payment service, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be forwarded to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
or for affected persons domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we transmit your payment data to Paypal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The disclosure is made pursuant to Art. 6 (1) lit. b DSGVO and only to the extent necessary for the payment process. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. If necessary, your payment data in accordance with Art. 6 para 1 lit. f The DSGVO has existed on the basis of the legitimate interest of PayPal in determining their solvency to credit agencies. The result of the credit check on the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit information may contain probability values (so-called score values). Insofar as score values are included in the results of the rating, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further Data Protection information, including information on the credit agencies used, please refer to PayPal's Data Protection Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-f ...
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment.
8.3.3 Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information about the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy. You can find data protection information on Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy
8.3.4 Stripe (VISA, Mastercard, Amex)
If you choose a payment method of the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, information communicated during the ordering process and details of your order (name, address, account number, bank routing number, credit card number, if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. The transmission of your data takes place exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary. You can find more information about Stripe's data protection at https://stripe.com/terms
9) Contact for evaluation reminder
Rating reminder by Trusted Shops If you have given us your express consent to this during or after your order in accordance with Art. 6 (1) lit. a DSGVO, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a rating reminder by e-mail. You can revoke your consent at any time by sending a message to the data controller or to the rating platform.
You can purchase vouchers via our online store. We use the data transmitted in the context of a voucher order to check and process the order and to send and redeem the MERSOR voucher.
11) Use of rating and test seal graphics
11.1.Trusted Shops Trustbadge
To display our Trusted Shops seal of approval and to offer Trusted Shops membership for buyers after an order, the Trusted Shops trust badge is integrated on this website. This serves to protect our legitimate interests in an optimal marketing of our offer, which prevail in the context of a balancing of interests, Art. 6 para. 1 lit. f DSGVO. The trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
12) Use of social media: Videos
12.1 Use Youtube videos
This website uses the Youtube embedding feature to display and play videos from "Youtube", which is owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Regardless of the playback of the embedded video, every time you visit this website, a connection to the Google advertising network "DoubleClick" is established, which may trigger further data processing without us having any influence on it.
12.2 Use Vimeo videos
Plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there. The described data processing operations are carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of Vimeo's legitimate interest in market research and the demand-oriented design of the Vimeo service. If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, can be found in the data protection information of Vimeo: https://vimeo.com/privacy Vimeo, Inc. based in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list Translated with www.DeepL.com/Translator (free version)
For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4, Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called "cookies" for tracking, which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
In the event that personal data is transferred to Google LLC., which is based in the USA, Google LLC. has certified itself for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
This processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of Vimeo's legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
13) Other services offered by third parties to extend functionality
13.2 Wishlist Plus (Swym)
We use Wishlist Plus provided by Swym Corporation 6010 W Spring Creek Parkway, Plano, TX 75024, USA ("Swym"). Wishlist Plus allows our customers to save products to individual wish lists and set themselves emails to remind them of saved products. For this purpose, Swym processes your customer number, email address (only for logged in users), IP address, relevant usage information (e.g. the products you put on a wishlist). For a complete list of the data required by Swym, please see the Swym Corporation Data Protection Policy (in English). The data collected by Swym is processed in the USA. Swym has contractually agreed to comply with the DSGVP.
13.3 Gift quiz
We use Typeform for the gift quiz provided on our site. Typeform is a survey service provided by Typeform SL, Carrer Bac de Roda, 163 (Local), 08018 - Barcelona, Spain ("Typeform").
Typeform collects on our behalf all the answers you give to questions in the gift quiz. In addition, Typeform collects your IP address in order to distinguish individual answers. As an EU-based company, Typeform is subject to the GDPR. Typeform stores and processes the data on European servers. For more information on the type of data collected, please see Typeform's Data Protection Policy.
14) Web analytics services
14.1 Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. We use Google Analytics only with IP anonymization enabled. This means that the IP address of the user is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) lit. f DSGVO based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data from Google.
As an alternative to the browser plug-in or within browsers on mobile devices, click the link to set an opt-out cookie that will prevent Google Analytics from coming to this website in the future (this opt-out cookie only works in if you delete your cookies in this browser and only for this domain, you must click this link again. Click here to disable Google Analytics tracking cookies.
Google LLC, based in the USA, is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU. This website also uses Google Analytics for cross-device analysis of visitor traffic conducted via a user ID. You can disable cross-device analysis of your usage under My Data, Personal Information in your customer account.
In addition to further information on the use of data by Google, the Google websites also provide setting and objection options:
- https://www.google.com/intl/de/policies/privacy/partners ("Use of Google data when using our partners' websites or apps"),
- http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"),
- http://www.google.com/settings/ads ("Manage information that Google uses to show you ads").
We use Hotjar to better understand the needs of our users and to optimize the offering and experience on this website. Hotjar is a service provided by Hotjar Ltd, Dragonara Business Centre, 5th floor, Dragonara Road, Paceville, St.Julians, STJ3141 Malta. Using Hotjar's technology, we get a better understanding of our users' experience (e.g. how much time users spend on individual pages, which links they click on, and whether they click somewhere even though there are no links there) and this helps us to tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect data about our users' behavior and about their devices, in particular IP address of the device (this is collected and stored only in anonymized form during your website use), location (country only), screen size, device type (Unique Device Identifiers), information about the browser used (e.g. Mozilla Firefox, Google Chrome, etc) and the language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
More information can be found on the Hotjar homepage, especially in the Privacy section.
15) (Re-)Marketing / Retargeting / Referral advertising
15.1 Facebook Pixel
Facebook Pixel for the creation of Custom Audiences with advanced data matching (with cookie consent tool) Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of advanced data matching, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
On the basis of the user's express consent, when a user clicks on an ad placed by us on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user's browser via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the mail address, which we collect on our website linked to the Facebook ad during transactions such as purchase transactions, account logins or registrations (extended data matching). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with advanced data matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with advanced data matching to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard variant of Facebook Pixel, the advanced data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook. These processing operations are carried out exclusively upon the granting of explicit consent in accordance with Art. 6 (1) a DSGVO. Consent to the use of the Facebook Pixel may only be declared by users older than 16 years of age. If you are younger, we ask you to ask your legal guardians for permission. The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the check mark next to the setting for the "Facebook Pixel" in the "Cookie Consent Tool" embedded on the website.
15.2 Google AdWords Remarketing
Our website uses the functions of Google AdWords Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in the browser of your device that automatically activates interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in optimal marketing of our website in accordance with Art. 6 (1) lit. f DSGVO. Further processing only takes place if you have agreed with Google that your internet and app browsing history will be linked by Google to your Google account and the information from your Google account will be used to personalize your ads on the web. If you sign in to Google while browsing our website, Google will use your information with Google Analytics data to create and define targeting lists for cross-device remarketing. For this purpose, Google temporarily links your personal information with Google Analytics data to create a target group. You can permanently disable the setting of cookie cookies by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/.
Alternatively, you can contact Digital Advertising Alliance at the Internet address www.aboutads.info for information about the setting of cookies and to make settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Not accepting cookies may limit the functionality of our website. Google LLC, based in the USA, is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above to make an objection.
For more information and privacy policies on advertising and Google, please visit: http://www.google.com/policies/technologies/ads/
15.3 Pinterest-Tag Conversion-Tracking
user actions and can track them (e.g., completed transactions, leads, website searches, product page views). When such an action is performed, your browser sends an HTTP request to the Pinterest server via the Pinterest tag from the cookie, with which certain information about the action (including type of action, time, browser type of the end device) is transmitted. Through this transmission, Pinterest can create statistics about the usage behavior on our website after forwarding from a Pinterest Pin, which serve us to optimize our offer. If personal user data is processed in the process, this is done pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the statistical evaluation of the success of product ads on Pinterest and the purchasing behavior of users and thus serves to optimize our online offer. However, we do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can object to this by deactivating the Pinterest tag conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can check whether advertising cookies from Microsoft are set in your browser and deactivate them by using the deactivation page for EU consumers http://www.youronlinechoices.com/de/praferenzmanagement/. You can obtain further information about Pinterest's data protection policy at the following Internet address: https://policy.pinterest.com/de/privacy-policy To the extent legally required, we have obtained your consent pursuant to Art. 6 (1) lit. a DSGVO for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection. Translated with www.DeepL.com/Translator (free version)
16) Tools and others
16.1 Google Web Fonts
This website uses so-called web fonts from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for the uniform display of fonts. When you visit a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly.
For this purpose, the browser you use must establish a connection to Google's servers. As a result, Google learns that our website was accessed via your IP address. The use of Google Web Fonts serves the uniform and attractive presentation of our online services. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. If your browser does not support web fonts, a default font is used by your computer.
Google LLC, based in the USA, is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
16.3 Applications to job advertisements by e-mail
On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail to the contact address provided. Inclusion in the application process requires that applicants provide us with all personal data required for a well-founded and informed assessment and selection together with the application by e-mail. The required information includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which must be given special consideration under employment and social law in the interest of social protection in the person of the applicant. The components that an application must contain in order to be considered in each individual case and the form in which these components must be submitted by mail can be found in the respective job advertisement. After receipt of the application sent using the specified e-mail contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For queries arising in the course of processing, we use either the e-mail address provided by the applicant with his or her application or a telephone number provided, at our discretion. The legal basis for this processing, including contacting us for queries, is generally Art. 6 Para. 1 lit. b DSGVO (for processing in Germany in conjunction with Section 26 Para. 1 BDSG), in the sense of which the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO (e.g. health data such as information on the severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. DSGVO. DSGVO so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard. Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) h. DSGVO if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.
If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, his or her data transmitted by e-mail and all electronic correspondence, including the original application e-mail, will be deleted at the latest after 6 months following notification. This period is measured on the basis of our legitimate interest in answering any follow-up questions about the application and, if necessary, to be able to fulfill our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b DSGVO (for processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of implementing the employment relationship.
16.4 Microsoft Power BI
For internal visualization of business processes and for user-defined analyses of business processes, we use the "Microsoft Power BI" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Where applicable, personal customer data may be the subject of visualization and analysis processes and may be processed by Microsoft BI for this purpose. In this case, Microsoft processes personal data as a processor bound by instructions in accordance with Art. 28 DSGVO and has made a contractual commitment to us to protect this data in accordance with the legal requirements. For this purpose, Microsoft uses state-of-the-art encryption procedures and guarantees the exclusive use of data processing procedures in billing centers within the EU.
You can view more information about Power BI's privacy practices at https://www.microsoft.com/de-de/trustcenter/security/powerbi-security.
17) Rights of the data subject
The applicable data protection law grants you comprehensive data protection rights (rights of access and intervention) vis-à-vis the controller for the processing of your personal data, which we inform you about below:
17.1 Right to information according to Art. 15 DSGVO:
In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing that concern you, as well as your right to be informed about what guarantees exist in accordance with Art. 46 DSGVO when your data is transferred to third countries;
17.2 Right to rectification according to Art. 16 DSGVO:
You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
17.3 Withdrawal according to 17 DSGVO:
You have the right to request the deletion of your personal data if the requirements of Art. 17 (1) of the DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
17.4 Right to restriction of processing pursuant to Art. 18 DSGVO:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is verified, if you refuse the deletion of your data due to unauthorized data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved, or if you have objected on the grounds of your particular situation as long as it has not yet been determined whether our legitimate reasons prevail;
17.5 Right to information pursuant to Art. 19 DSGVO:
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
17.6 Right to data portability according to Art. 20 DSGVO:
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;
17.7 Right to information according to Art. 19 DSGVO:
If you have the right to rectify, erase or restrict the processing to the controller, the controller is obliged to rectify or erase the data to all recipients to whom the personal data concerning you have been disclosed or to restrict the processing , unless this proves impossible or disproportionate. You have the right to be informed about these recipients. - Right to data portability in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided to us in a structured, general and machine-readable form or to request that it be transferred to another controller, insofar as this is technically possible;
17.8 Right of appeal according to Art. 77 DSGVO:
If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
17.9 Withdrawal of the granted consent according to 7 para. 3 DSGVO:
You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
Right of objection
IF, IN THE CONTEXT OF INTEREST RESPONSIBILITY, WE PROCESS OUR PERSONAL DATA ON THE BASIS OF OUR SUBSTANTIAL LEGITIMATE INTEREST, YOU HAVE ANY RIGHT TO OBTAIN CONSEQUENCES WITH AN IMPACT ON THE FUTURE ARISING FROM THEIR SPECIFIC GROUNDS.
IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING IS SUBJECT TO EXERCISE IF WE CAN PROVIDE UNCONDITIONAL GROUNDS FOR PROCESSING THAT EXCEED HIS INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THIS PURPOSE. YOU CAN EXERCISE THE OPPOSITE AS DESCRIBED ABOVE.
IF YOU USE YOUR CONTINGENT RIGHT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ACCEPTANCE.
18) Duration of the storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent. If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of a contract and/or there is no legitimate interest on our part to continue storing it. When processing personal data on the basis of Art. 6 (1) f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) (f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) DSGVO. Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
19) Timeliness of the Data Protection Policy
This Data Protection Policy is currently valid and dated 04/02/2022.
This declaration can be accessed and printed out by you at any time on our website. You can print or save this document with the usual functions of your browser (= browser: usually "File" -> "Save as").