Privacy policy
Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.
1.2 The controller for data processing on this website, in the sense of the General Data Protection Regulation (GDPR), is RODEBO-Lifestyle GmbH, Kirschstr. 14, 80999 Munich, Germany, Tel.: +49 89 1225 1007, E-Mail: info@sassyclassy.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 The controller has appointed a data protection officer who can be reached as follows: "Daniel Lichtenstein"
2) Data Collection When Visiting Our Website
2.1 When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you came to the page
- Browser used
- Operating system used
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6(1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to retrospectively check the server log files should concrete evidence point to illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1) lit. b GDPR for the purpose of contract performance, in accordance with Art. 6(1) lit. a GDPR in the case of a granted consent, or in accordance with Art. 6(1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting Us
5.1 Your Own Review Reminder
Based on your explicit consent in accordance with Art. 6(1) lit. a GDPR, we use your email address to send you a one-time reminder to submit a review of your order. You can withdraw your consent at any time by sending a message to the controller.
5.2 Zendesk
To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you send contact inquiries via email through our website, they will be stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can always check the current status of your request using the individually assigned ticket number.
For the organization and processing of inquiries, personal data, including at least your first name, last name, and email address, is collected, transmitted to the provider, stored there, and read out.
The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, the fastest possible response to your request, and the optimization of our service offering in accordance with Art. 6(1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
5.3 WhatsApp-Business
You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called "Business version" of WhatsApp for this purpose.
If you contact us via WhatsApp on the occasion of a specific business transaction (e.g., a placed order), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6(1) lit. b. GDPR to process and respond to your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6(1) lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and in a timely manner.
Your data will only be used to answer your request via WhatsApp. It will not be passed on to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact details of users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6(1) lit. a GDPR by accepting the WhatsApp terms of use when they first use the app on their device. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to the WhatsApp privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
In the context of the aforementioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
5.4 When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and answering your request and only to the extent necessary for this.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6(1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1) lit. b GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been finally clarified and provided that there are no legal storage obligations to the contrary.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6(1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for opening the account can be found in the input mask of the corresponding form on our website.
You can delete your customer account at any time by sending a message to the controller at the address mentioned above. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal storage periods to the contrary, and we no longer have a legitimate interest in continued storage.
7) Use of Customer Data for Direct Marketing
7.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter if you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) and the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.
7.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this purpose, we do not need to obtain separate consent from you in accordance with Section 7 (3) of the Act Against Unfair Competition (UWG). The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6(1) lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails.
You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
7.3 Klaviyo
Our email newsletters are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when you registered for the newsletter to this provider in accordance with Art. 6(1) lit. f GDPR, so that this provider can take over the newsletter dispatch on our behalf.
Subject to your explicit consent in accordance with Art. 6(1) lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data records.
You can withdraw your consent to newsletter tracking at any time with future effect.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
7.4 WhatsApp Newsletter
If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number.
To send the newsletter, you add our provided mobile phone number to the address contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.
The data collected by us when you register for the newsletter is processed exclusively for the purpose of advertising communication via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.
To send our WhatsApp newsletter, we therefore use a mobile device whose address book only stores the WhatsApp contact details of our newsletter recipients. This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6(1) lit. a GDPR by accepting the WhatsApp terms of use when they first use the app on their device. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to the WhatsApp privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with WhatsApp, which protects the data of our newsletter recipients and prohibits disclosure to third parties.
In the context of the aforementioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
7.5 - Our WhatsApp newsletters are sent via this provider: chatarmin.com GmbH, Kaiserstraße 89/2/3, 1070 Vienna, Austria
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on your phone number linked to your WhatsApp account and, if applicable, your first and last name in accordance with Art. 6(1) lit. f GDPR to this provider so that it can take over the newsletter dispatch on our behalf.
Subject to your explicit consent in accordance with Art. 6(1) lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns by means of web beacons or tracking pixels in the WhatsApp messages sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data records.
You can withdraw your consent to newsletter tracking at any time with future effect.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
7.6 Email Stock Availability Notification
For items that are temporarily unavailable, you can sign up to receive email stock availability notifications. We will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) and the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for our email notification service for product availability will be used strictly for the intended purpose.
You can unsubscribe from the availability notifications at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.
7.7 Shopping Cart Reminders via Email
If you abandon your purchase with us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by email.
The only mandatory information for sending this reminder is your email address. The provision of further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR for the purpose of sending a shopping cart reminder. In doing so, we store your IP address entered by the Internet Service Provider (ISP) and the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for our email notification service is used strictly for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.
7.8 Advertising via postal mail
Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth and your professional, industry or company name in accordance with Art. 6(1) lit. f GDPR and to use it for sending interesting offers and information about our products by postal mail.
You can object to the storage and use of your data for this purpose at any time by notifying us.
8) Data Processing for Order Fulfillment
8.1 Insofar as this is necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data you provided with the order in order to inform you personally within the scope of our legal information obligations in accordance with Art. 6(1) lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 pixi*
For order processing, we use the following provider: Descartes Systems (Germany) GmbH, Walter-Gropius-Str. 15, D-80807 Munich, Germany
Name, address and, if applicable, other personal data are passed on to the provider in accordance with Art. 6(1) lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order.
8.3 Disclosure of personal data to shipping service providers
- DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We pass on your email address and/or telephone number to the provider in accordance with Art. 6(1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1) lit. b GDPR, we only pass on the recipient's name and the delivery address to the provider. The data is only passed on to the extent that this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.
The consent can be withdrawn at any time with future effect by notifying the controller named above or the provider.
- DPD
As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
We pass on your email address and/or telephone number to the provider in accordance with Art. 6(1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1) lit. b GDPR, we only pass on the recipient's name and the delivery address to the provider. The data is only passed on to the extent that this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.
The consent can be withdrawn at any time with future effect by notifying the controller named above or the provider.
- Hermes
As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany
We pass on your email address and/or telephone number to the provider in accordance with Art. 6(1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1) lit. b GDPR, we only pass on the recipient's name and the delivery address to the provider. The data is only passed on to the extent that this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.
The consent can be withdrawn at any time with future effect by notifying the controller named above or the provider.
- Österreichische Post
As a transport service provider, we use the following provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria
We pass on your email address and/or telephone number to the provider in accordance with Art. 6(1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1) lit. b GDPR, we only pass on the recipient's name and the delivery address to the provider. The data is only passed on to the extent that this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.
The consent can be withdrawn at any time with future effect by notifying the controller named above or the provider.
8.4 Use of payment service providers
- Amazon Pay
One or more online payment methods of the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6(1) lit. b GDPR. The disclosure of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Paypal
One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider where you pay in advance, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6(1) lit. b GDPR. The disclosure of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
If you select a payment method where we pay in advance, you will also be asked in the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative payment method).
In order to safeguard our legitimate interest in determining your creditworthiness in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6(1) lit. f GDPR. The provider checks, on the basis of the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment process. The data is passed on in accordance with Art. 6(1) lit. b GDPR and only to the extent that this is necessary for the payment process.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
If available and you select the PayPal payment method "Purchase on account", your payment data will first be transmitted to PayPal in preparation for payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6(1) lit. b GDPR. In this case, RatePay carries out an identity and credit check on its own behalf to determine creditworthiness in accordance with the principle already mentioned above and passes on your payment data to credit agencies on the basis of the legitimate interest in determining creditworthiness in accordance with Art. 6(1) lit. f GDPR. A list of the credit agencies that Ratepay can use can be found here: https://www.ratepay.com/legal-payment-creditagencies/
If you use the payment method of a local third-party provider, your payment data will first be passed on to PayPal in accordance with Art. 6(1) lit. b GDPR in preparation for payment. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider in accordance with Art. 6(1) lit. b GDPR for the purpose of carrying out the payment:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
Further data protection information can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Stripe
One or more online payment methods of the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6(1) lit. b GDPR. The disclosure of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
If you select a payment method where the provider pays in advance (e.g., purchase on account or in installments or direct debit), you will also be asked in the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative payment method).
In order to safeguard our legitimate interest in determining the creditworthiness of our customers, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6(1) lit. f GDPR. The provider checks, on the basis of the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
9) Web Analysis Services
9.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies that are stored on your device as small text modules and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits to exclude a direct personal reference.
The information is transmitted to Google servers and processed there. Transfers to Google LLC with its registered office in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us and to provide other services associated with website and internet use. The shortened IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can use it to create statistics that provide information about the age, gender and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This can be used to identify target groups for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6(1) lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, but only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1) lit. a GDPR, have set up an account on this website and log into this account on various devices, your activities, including conversions, can be analyzed across devices.
Collection of data provided by users
In order to improve the analysis results for users whose contact data we have received in the context of business or business-like relationships, we use the "Collection of data provided by users" function.
Subject to your explicit consent in accordance with Art. 6(1) lit. a GDPR, we transmit one or more files with aggregated customer data relating to you (primarily email address and phone number) electronically to Google as part of this function. Google does not receive access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up.
The processing serves to refine measurement data, improves cross-device user traceability and enables the integration of analysis results into Google Ads' ad personalization and conversion tracking functions.
You can withdraw your consent to us at any time with future effect. Further information on Google's data protection measures with regard to the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
9.2 Google Tag Manager
This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and being able to calibrate, control and link them to conditions via a uniform user interface. The Google Tag Manager itself does not store any information on user devices or read it out. The service also does not carry out its own data analyses. However, when a page is accessed, your IP address is transmitted to Google via the Google Tag Manager and stored there if necessary. A transmission to servers of Google LLC in the USA is also possible.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6(1) lit. a GDPR. Without this consent, the Google Tag Manager will not be used during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
9.3 Klar!
This website uses the web analysis service of the following provider: Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany
With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading out device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks and mouse-overs). Pseudonymization generally excludes direct personal reference. A merging with other clear data collected about you does not take place.
All of the processing described above, in particular the reading out or storing of information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
9.4 Shopify Analytics
This website uses the web analysis service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading out device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks and mouse-overs). Pseudonymization generally excludes direct personal reference. A merging with other clear data collected about you does not take place.
All of the processing described above, in particular the reading out or storing of information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
10) Retargeting/ Remarketing and Conversion Tracking
10.1 Meta Pixel with extended data matching
Within our online offering, we use the "Meta Pixel" service from the following provider in the mode of extended data matching: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter with the help of "Meta Pixel". This URL parameter is then entered into the user's browser by a cookie that our linked page itself sets after the redirection. In addition, this cookie collects specific customer data such as the email address, which we collect on our website linked to the Facebook or Instagram advertisement during processes such as purchases, account logins or registrations (extended data matching). The cookie is then read out and enables the transmission of the data including the specific customer data to Meta.
We use "Meta Pixel" with extended data matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of the users or have certain characteristics (e.g., interests in certain topics or products, which are determined on the basis of the websites visited) that we transmit to Meta (so-called "Custom Audiences").
In addition, we analyze the effectiveness of our advertisements by tracking whether users have been redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by recording more assigned conversions.
All transmitted data is stored and processed by Meta so that it can be assigned to the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to serve ads on and off Facebook.
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, it may also be transmitted to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.2 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and on the basis of the pages you visit. Further data processing only takes place if you have agreed to Google linking your Internet and app Browse history with your Google account and using information from your Google account to personalize ads you view on the web. In this case, if you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target groups for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. Without this consent, the retargeting technology will not be used during your visit to the site.
You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Details on the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
10.3 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the Google Ads offer to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We pursue the goal of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and has been redirected to this page. Every Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships even more interest-based, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and phone numbers) electronically to Google. Google does not receive access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.
The transmission of customer data to Google only takes place if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw this consent to us at any time with future effect. Further information on Google's data protection measures with regard to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.4 Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
If you have arrived at our website from an advertisement on the provider's domain, the success of the advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, certain device and browser information, including your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics on user behavior on our website after redirection from an advertisement, which serves to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
10.5 Snap Pixel (Snapchat)
This website uses the conversion tracking technology of the following provider: Snap Inc., 63 Market Street, Venice, CA 90291, USA
If you have arrived at our website from an advertisement on the provider's domain, the success of the advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, certain device and browser information, including your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics on user behavior on our website after redirection from an advertisement, which serves to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
10.6 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
If you have arrived at our website from an advertisement on the provider's domain, the success of the advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, certain device and browser information, including your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics on user behavior on our website after redirection from an advertisement, which serves to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
11) Page Functionalities
11.1 Youtube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data can also be transmitted to: Google LLC., USA
If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest when the video is played in order to load the content. In the process, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want the data to be assigned to your account, you must log out before pressing the playback button.
All of the aforementioned processing, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your explicit consent for this in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service via the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11.2 Google Web Fonts
This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In the process, certain browser information, including your IP address, is transmitted to the provider.
Data can also be transmitted to: Google LLC, USA
The processing of personal data in the course of establishing a connection with the font provider will only be carried out if you have given us your explicit consent in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/
11.3 Google Customer Reviews (formerly Google Certified Merchant Program)
We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to collect customer reviews from users of our website. After a purchase on our website, you will be asked whether you would like to participate in an email survey from Google.
If you give your consent in accordance with Art. 6(1) lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The rating you submit will then be summarized with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can withdraw your consent at any time by sending a message to the controller or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/
11.4 Make
We use the services of the following provider for the integration and synchronization of databases and web applications: Celonis, Inc., One World Trade Center, 87th Floor, New York, NY, 10007, USA
In this process, our processing operations are automated and different workflows are established to efficiently manage and execute internal processes in our processing system. If personal data is also processed in the process, this is done in accordance with Art. 6(1) lit. f GDPR on the basis of our legitimate interest in the optimization of our internal organization.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11.5 Typeform
For conducting surveys or with online forms, we use the services of the following provider: TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain
The provider enables us to design and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address are also collected, transmitted to the provider and stored on the provider's servers.
The information you enter into the forms is stored with a password so that third-party access is excluded and only we can evaluate the data for the purpose named in the form.
When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6(1) lit. b GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing is carried out on the basis of Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
11.6 Online applications via a form
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply using a corresponding form.
Applicants must provide all personal data required for a sound assessment, including general information such as name, address and contact details, as well as performance-related proof and, if applicable, health-related information. Details on the application can be found in the job advertisement.
When the form is submitted, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The processing is carried out on the basis of Art. 6(1) lit. b GDPR (or Section 26(1) of the German Federal Data Protection Act (BDSG)), within the meaning of which the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information on severe disability) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9(2) lit. b. GDPR, so that we can exercise the rights arising from labor law and the law of social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of the special categories of data can also be based on Art. 9(1) lit. h GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's working capacity, for medical diagnostics, for the provision of health or social care or treatment or for the management of health or social care systems and services.
If an applicant is not selected or an applicant withdraws their application prematurely, their data transmitted via the form and all electronic correspondence, including the application email, will be deleted after a corresponding notification at the latest after 6 months. This period is measured by our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to be able to meet our burden of proof obligations arising from the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6(1) lit. b GDPR (in the case of processing in Germany in conjunction with Section 26(1) BDSG) for the purpose of implementing the employment relationship.
12) Tools and Miscellaneous
12.1 - DATEV
For bookkeeping, we use the service of the cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
The provider processes incoming and outgoing invoices and, if applicable, also the bank movements of our company in order to automatically record invoices, match them with the transactions and create the financial accounting from them in a semi-automated process.
If personal data is also processed in the process, the processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business transactions in accordance with Art. 6(1) lit. f GDPR.
12.2 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when they visit the page, on which consent for certain cookies and/or cookie-based applications can be given by checking a box. The use of the tool ensures that all cookies/services that require consent are only loaded if the respective user has given their consent by checking the corresponding box. This ensures that such cookies are only set on the user's device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. As a matter of principle, no personal user data is processed in this process.
If personal data (such as the IP address) is processed in individual cases for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6(1) lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the processing is also Art. 6(1) lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
If necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
12.3 Channable
This website uses Channable, an online marketing tool from ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands. The use is based on Art. 6(1) sentence 1 lit. f. GDPR. Channable uses so-called cookies, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website, such as browser type/version, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request, is usually transmitted to a Channable server in Germany and stored there. The IP address transmitted by your browser as part of Channable is not merged with other Channable data. In addition, the IP address is only temporarily stored by Channable for a short period (usually a maximum of 24 hours) and then made unrecognizable. The temporary storage is exclusively for the detection of possible click fraud (bot detection).
On behalf of the operator of this website, Channable will use this information to evaluate the performance of connected online marketing channels such as idealo.de or Google Shopping. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Channable and the processing of this data by Channable by using the opt-out option available at the following link: www.channelpilot.de/optout. In this case, an opt-out cookie will be set, which will prevent the future collection of your data when you visit this website. The opt-out cookie only applies to the browser you last used. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Channable can be found at https://www.channable.com/privacy-policy
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please follow the procedure for objection described above.
12.4 - PandaDoc
For the digital signing of documents, we use the services of the following provider: PandaDoc, Inc., 548 Market St PMB 185308, San Francisco, CA, 94104, USA
The service enables the legally valid signing of documents with an electronic signature from any device.
For this purpose, the service collects, stores and transmits not only the electronic signature for verification and proof of the signature, but also usage data of the device used (in particular the IP address) and certain transaction data.
The processing is carried out on the basis of our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management in accordance with Art. 6(1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
13) Rights of the Data Subject
13.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) against the controller with regard to the processing of your personal data, whereby the legal basis is referred to for the respective exercise conditions:
- Right to information in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to notification in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw granted consent in accordance with Art. 7(3) GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing and - if applicable - additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).
When personal data is processed on the basis of explicit consent in accordance with Art. 6(1) lit. a GDPR, the data concerned is stored until you withdraw your consent.
If statutory retention periods exist for data that is processed within the scope of legal or legal-like obligations on the basis of Art. 6(1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in continued storage.
When personal data is processed on the basis of Art. 6(1) lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21(1) GDPR, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6(1) lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21(2) GDPR.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
