Data protection

Data protection declaration and information on any consent you may have given

As the person responsible for the purposes of data protection regulations, we will inform you below about how we process your personal data.

I. The concept of personal data and other important terms

In simple terms, personal data is all information that relates to you personally as the data subject. Provisions on what the term “personal data” means and what other terms that are important for the following data protection information mean can be found in Article 4 of the DS-GVO (General Data Protection Regulation).

II. Name and contact details of the person responsible; Contact details of the data protection officer

In simple terms, the person responsible is the person who alone or jointly with others decides on the purposes and means of processing personal data. You can find the name and contact details of the person responsible (and if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / our legal notice.

III. Purposes of processing your personal data; Legal basis for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.

1. In order to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analyzing the use of our website, your personal data is processed on the basis of Article 6 Paragraph 1 Letter f) DS -GVO.

2. In order to carry out pre-contractual measures based on your request, your personal data will be processed on the basis of Article 6 Paragraph 1 Letter b) DS -GVO.

3. In order to protect our legitimate interest in answering inquiries and carrying out other measures based on an inquiry from you, your personal data is processed on the basis of Article 6 Paragraph 1 Letter f) DS -GVO.

4. In order to fulfill a contract to which you are a party, your personal data will be processed on the basis of Article 6 Paragraph 1 Letter b) DS -GVO.

5. In order to carry out measures for advertising purposes, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 Paragraph 1 Letter a) of the DS -GVO or on the basis of Article 6 Paragraph 1 Letter f ) DS -GVO.

6. In order to fulfill legal obligations to which we are subject, your personal data is processed on the basis of Article 6 Paragraph 1 Letter c) DS -GVO.

7. In order to protect our legitimate interest in enforcing our rights and defending against claims against us, your personal data is processed on the basis of Article 6 Paragraph 1 Letter f) DS -GVO.

Our systems are secured using state-of-the-art technical and organizational measures to protect your personal data from access, modification or distribution by unauthorized persons as well as from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the relevant further information in this data protection declaration.

IV. Transfer of your personal data to third parties; Categories of recipients of your personal data

To the extent that this is necessary to achieve the purposes for processing your personal data, we will transmit your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the relevant further information in this data protection declaration. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the necessary minimum.

V. Scope of processing of your personal data for the individual processing purposes

Below we will inform you in detail about the processing of your personal data for the various processing purposes.

Use of our website for information purposes

If you visit our website without providing us with information, we will only process the personal data about you that your browser transmits to our server. This is the following data that is technically necessary to display our website to you and to ensure stability and security:

− the page you accessed

− Date and time of the request

− amount of data transferred

− Source or reference from where you came to the page

− browser you use

− operating system you use

− Your IP address

Your personal data is processed on the basis of Article 6 Paragraph 1 Letter f) DS -GVO to protect our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analyzing the use of our website .

Your personal data will be deleted after 6 months, unless they are still needed to assert rights or enforce claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after the corresponding procedure has been completed.

You are under no obligation to provide your personal information. However, failure to provide your personal data would mean that you would not be able to view our website.

2. Processing requests

If you contact us with an inquiry or concern, we process the personal data and information/documents you provide. Regardless of how you send us your inquiry or concern, these may include:

− Date and time of contact

− Name data

− Contact details

− Data on inquiries/concerns

− information/documents submitted

The processing of your personal data and the information/documents takes place - depending on the content of your request or concern - on the basis of Article 6 Paragraph 1 Letter b) DS -GVO to carry out pre-contractual measures or on the basis of Article 6 Paragraph 1 Letter b) DS -GVO for the fulfillment of a contract to which you are a party or on the basis of Article 6 Paragraph 1 Letter f) DS -GVO to protect our legitimate interest in answering inquiries/concerns and in carrying out other measures in connection with the processing of inquiries/concerns.

To the extent that this is necessary to process your request/concern, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the necessary minimum.

Your personal data will be deleted when your request/concern has been clarified, but at the earliest after the expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to use the data for another processing purpose within the framework of the legal requirements and continue to process your data in accordance with the information in this data protection declaration.

You are under no obligation to provide your personal information. However, failure to provide your personal data would mean that we cannot process your request or concern.

3. Fulfillment of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with a contract, we will process the data you provide to process the contract. These are your customer data (e.g. your name and address) and the contract data (e.g. information about the contractual products as well as payment and delivery information).

Your personal data is processed on the basis of Article 6 Paragraph 1 Letter b) DS -GVO for the performance of a contract to which you are a party.

To the extent that this is necessary to fulfill the contract with you, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission is made to the service providers involved in the contract processing. These are the providers of the processing tools we use, the companies commissioned with the transport and the payment service providers commissioned with the payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions:
https://www.paypal.com/de/webapps/mpp/ua/privacy- full?locale.x=de_DE

In cases where your personal data is transmitted to third parties the amount of data transmitted is reduced to the required minimum.

Your personal data will be deleted after the tax and commercial law retention periods of 6 or 10 years have expired, unless we are allowed to continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

In order to conclude a contract with us, you must provide your personal data. You are under no obligation to provide your personal information. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you.

4. Advertising via newsletter

If you register for our newsletter, we process the email address you provide - and if you provide additional personal data - in order to send you information about our offers by email. In this respect, only providing your email address is mandatory. If you voluntarily submit additional personal data, we may process this data in order to address you personally in the newsletter.

If you register for our newsletter, you give your consent with the following content: “I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and the other personal data I have provided for this purpose sending the newsletter. I can revoke this consent at any time and without giving reasons with future effect. The lawfulness of the processing carried out up to the time of revocation remains unaffected in the event of revocation.”

Registration for our newsletter takes place using the so-called double opt-in procedure. This means: After registering, you will first receive an email informing you that you have registered for the newsletter, together with a request to confirm your registration. Your confirmation of registration is required in order to document the necessary consent to the sending of the newsletter and in order to be able to recognize registrations to third-party e-mail addresses. In connection with registrations for the newsletter and confirmations, the IP address as well as the date and time are logged in order to be able to provide evidence of the granting of consent in accordance with the legal requirements, if necessary.

The processing of your personal data is based on the consent you have given in this regard in accordance with Article 6 Paragraph 1 Letter a) DS -GVO.

You can revoke your consent at any time and without giving reasons with future effect. All you need to do is send a corresponding message to the person responsible, whose contact details can be found in the information about the person responsible. The lawfulness of the processing carried out up to the time of revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue using the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration process.

In order to receive our newsletter, you must at least provide your email address. You are under no obligation to provide your email address. However, if you do not provide your email address, you will not be able to subscribe to our newsletter.

5. Advertising by post

We process the personal data you provide about your first and last name and address, if necessary, to send information about our offers by post.

In this respect, your personal data is processed on the basis of Article 6 Paragraph 1 Letter f) DS -GVO to protect our legitimate interest in carrying out advertising measures by post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. All you need to do is send a corresponding message to the person responsible, whose contact details can be found in the information about the person responsible.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by post, the personal data you have provided regarding your first and last name and address will be deleted immediately, unless we are permitted to use the data for another processing purpose Within the framework of the legal requirements and in accordance with the information in this data protection declaration, we will continue to process it.

You are not obliged to provide your personal data to provide legacy measures by post. However, failure to provide your personal data would mean that we cannot send you advertising by post.

6. Compliance with legal obligations to which we are subject

Within the framework of the relevant requirements, we process your personal data to fulfill legal obligations to which we are subject.

In order to fulfill legal obligations to which we are subject, your personal data is processed on the basis of Article 6 Paragraph 1 Letter c) DS -GVO.

To the extent that this is necessary to fulfill legal obligations to which we are subject, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the necessary minimum.

Your personal data will be deleted when it is no longer needed to fulfill legal obligations to which we are subject, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

7. Use of cookies

We use so-called cookies on our website. These are small files stored on your device through which certain information is transmitted to us. The use of cookies is intended to enable you to use certain functions and to make our offering more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after closing your browser, and enable us or our partner companies (third-party cookies) to recognize you the next time you visit our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping cart function. In this respect, your personal data is processed on the basis of Article 6 Paragraph 1 Letter b) DS -GVO in order to carry out pre-contractual measures that are carried out at your request as the data subject or on the basis of Article 6 Paragraph 1 Letter b) DS -GVO for the fulfillment of a contract to which you are a party or on the basis of Article 6 Paragraph 1 Letter f) DS -GVO to protect our legitimate interest in providing functions that are as user-friendly as possible. If we or our partner companies use cookies for reach measurement or marketing purposes, you can find detailed information about this in the relevant additional information in this data protection declaration.

You can prevent the storage of cookies by setting your browser software accordingly. You can delete saved cookies using the appropriate settings. If necessary, please refer to the program help for the browser you are using to see how the relevant settings can be made. However, we would like to point out that in this case you may not be able to fully use all of the functions of our website. As an example, we refer to the information on the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

You can generally object to the use of cookies for marketing purposes for a variety of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http: //www.youronlinechoices.com explain.

8. Plugins and Tools

YouTube with extended data protection

This website embeds videos from the YouTube website. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is integrated, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to monitor your surfing behavior

and assign it directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in extended data protection mode. According to YouTube, videos played in extended data protection mode are not used to personalize browsing on YouTube. Ads that are displayed in extended data protection mode are also not personalized. No cookies are set in extended data protection mode. Instead, so-called local storage elements are stored in the user's browser, which, like cookies, contain personal data and can be used for recognition. Details about the extended data protection mode can be found here:

https://support.google.com/youtube/answer/171780.

If necessary, further data processing operations may be triggered after activating a YouTube video, over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DS-GVO. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DS-GVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further information about data protection at YouTube can be found in their data protection declaration at: https://policies.google.com/privacy?hl=de.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link:

https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service we can integrate maps on our website.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google can use Google Fonts for the purpose of uniform font display. When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DS-GVO. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DS-GVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more information on how to handle user data in Google's privacy policy:

https://policies.google.com/privacy?hl=de.

9. Enforcement of our rights and defense against claims against us

If necessary, we process your personal data to protect our legitimate interest in enforcing our rights and defending against claims against us.

In this case, processing takes place

#############

Your personal data on the basis of Article 6 Paragraph 1 Letter f) DS-GVO.

To the extent that this is necessary to protect our legitimate interest, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission is made to the providers of debt collection services involved or our lawyers.

In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the necessary minimum.

Your personal data will be deleted after the process has been completed, but at the earliest after the expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to use the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration continue to process.

VI. Duration for which your personal data will be stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration. For information on the period for which your personal data will be stored and the criteria for determining this period, please see the information on the processing of your personal data for the individual processing purposes in this data protection declaration.

VII. Your rights

1. Overview

In order to ensure fair and transparent processing of personal data, you as the data subject are entitled to the following rights in accordance with data protection regulations:

the right to information in accordance with Article 15 DS-GVO,

the right to correction in accordance with Article 16 DS-GVO,

the right to deletion in accordance with Article 17 DS-GVO,

the right to restriction of processing in accordance with Article 18 DS-GVO, the right to data portability in accordance with Article 20 DS-GVO,

the right to revoke consent given at any time in accordance with Art. 7 Para. 3 DS-GVO,

the right to object to processing in accordance with Article 21 DS-GVO, about which we will inform you separately below

and the right to complain to the supervisory authority in accordance with Art. 77 DS-GVO, about which we will inform you separately below.

2. Your right to object to processing

THE PROCESSING OF PERSONAL DATA IS PERMISSIBLE IF THE PROCESSING IS NECESSARY TO PROTECT THE LEGITIMATE INTERESTS OF THE CONTROLLER OR A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMIES OF THE DATA SUBJECT WHICH REQUIRE THE PROTECTION OF PERSONAL DATA GENE, ESPECIALLY WHEN IT IS IF THE PERSON AFFECTED IS A CHILD, ART. 6 ABS. 1 LETTER F) DS-GVO.

YOU, AS A DATA SUBJECT, HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU, WHICH IS BASED ON ART. 6 ABS. 1 LETTER F) DS-GVO WILL BE OBJECTED; THIS ALSO APPLIES TO PROFILING BASED ON THESE TERMS.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROOF COMPLEX REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR THE PROCESSING SERVES THAT DEVELOPMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA TO OPERATE DIRECT ADVERTISING, YOU AS A DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU AS A DATA SUBJECT OBJECT TO PROCESSING FOR DIRECT ADVERTISING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.

3. Your right to complain to the supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the requirements of the DS-GVO.

VIII. Information on the basis for providing your personal data and possible consequences of failure to provide it

To the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal information and possible consequences of not providing information on the processing of your personal data for the individual processing purposes.