Privacy Policy
Privacy Policy
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when you use our website. Personal data refers to all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Marco Schuster, Schrittmacher Shop, Antonstr. 41, 01097 Dresden, Germany, Tel.: 0351/2058611, E-Mail: info@schrittmacher-shop.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to subsequently check the server log files if concrete indications point to unlawful use.
3) Hosting & Content Delivery Network
3.1 Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf of us. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de
Further processing on servers other than the aforementioned Shopify servers only takes place within the scope communicated below.
3.2 Google Cloud CDN
On our website, we use a so-called Content Delivery Network ("CDN") from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). A Content Delivery Network is an online service that is used to deliver large media files (such as graphics, page content or scripts) via a network of regionally distributed servers connected via the internet. The use of Google's Content Delivery Network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website. Further information on Google's data protection policy can be found at the following internet address: https://www.google.de
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If personal data is processed by individual cookies used by us, the processing is carried out either in accordance with Art. 6 Para. 1 lit. b GDPR for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of a granted consent, or in accordance with Art. 6 Para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting us
When you contact us (e.g. via contact form or e-mail), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been finally clarified and provided that no legal storage obligations stand in the way.
6) Data processing when opening a customer account
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no legal retention periods prevent deletion and we no longer have a legitimate interest in continued storage.
7) Use of customer data for direct marketing
7.1 - Newsletter dispatch via Shopify Email
Our e-mail newsletters are sent via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to whom we transmit the data you provided when subscribing to the newsletter. This transmission is carried out in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) is generally stored on Shopify's servers in the EU.
As part of Shopify's aforementioned services, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf of us. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Shopify uses this information to send and statistically analyze newsletters on our behalf. For analysis, the sent e-mails may contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links may have been clicked. Technical information is also collected (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively pseudonymized and is not linked to your other personal data; direct personal identifiability is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Shopify may use this data in accordance with Art. 6 Para. 1 lit. f GDPR on its own legitimate interest in the needs-based design and optimization of the service as well as for market research purposes, for example, to determine from which countries the recipients come. However, Shopify does not use the data of our newsletter recipients to write to them directly or to pass on the data to third parties.
We have concluded a data processing agreement with Shopify, obliging Shopify to protect our customers' data and not to pass it on to third parties.
Shopify's data protection policy can be viewed here: https://www.shopify.de
7.2 Product availability notification by e-mail
For temporarily unavailable items, you can sign up to receive email product availability notifications. In this case, we will send you a one-time email notification about the availability of the item you selected. Your email address is the only mandatory information for sending this notification. Providing further data is voluntary and may be used to address you personally. For email dispatch, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have explicitly confirmed your consent by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for our e-mail notification service for product availability is used strictly for the intended purpose. You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
8) Data processing for order fulfillment
8.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided with your order (name, address, e-mail address) to inform you personally about upcoming updates within the legally prescribed period in a suitable communication channel (e.g. by post or e-mail) in accordance with our legal information obligations under Art. 6 Para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communicating information about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s) who assist us partially or fully in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
8.2 Use of special service providers for order processing and fulfillment
- DHL Fulfillment
Order processing is carried out via the service provider DHL Home Delivery GmbH, Sträßchensweg 10, 53113 Bonn, as part of "Shipping by DHL Fulfillment". Your personal data will be forwarded to DHL Fulfillment exclusively for the purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR.
- Shopify Order Printer
For the accounting and logistical organization of orders, we use the "Order Printer" service from Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the automated creation of invoices, receipts, shipping labels and other business documents. If personal order data is processed via the service for the preparation of these documents, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the proper processing of online orders.
8.3 Use of payment service providers
- Amazon Pay
If you choose the payment method "Amazon Pay", payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we transmit the information you provided during the order process, along with information about your order, in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies, i.e., small text files that are stored on the end device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. This consent can be revoked at any time via the "Cookie Consent Tool" implemented on the website. Further information on Amazon Payments' data protection policy can be found at the following internet address: https://pay.amazon.de
- Apple Pay
If you opt for the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing takes place via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored with "Apple Pay". Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code you previously set and verify it using your device's "Face ID" or "Touch ID" function.
For the purpose of payment processing, the information you provide during the order process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for the purpose of payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on an iPhone or Apple Watch to complete a purchase you made via Safari on a Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com
- Google Pay
If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing takes place via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the verification method you have set up (e.g. facial recognition, password, fingerprint or pattern).
For the purpose of payment processing, the information you provide during the order process, along with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which verifies that a payment has been made. This transaction number contains no information about the actual payment data of your payment methods stored in Google Pay, but is created and transmitted as a unique numerical token. In all transactions via Google Pay, Google acts merely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and e-mail address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
The Google Pay Terms of Use can be found here:
https://payments.google.com
Further information on data protection for Google Pay can be found at the following internet address:
https://payments.google.com
- Klarna
If you choose a Klarna payment service, payment processing takes place via Klarna Bank AB (publ), https://www.klarna.com
https://cdn.klarna.com
The credit assessment may contain probability values (so-called score values). Insofar as score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, is included in the calculation of the score values. Klarna uses the information obtained about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual payment processing.
Your personal data will be treated in accordance with the applicable data protection regulations and according to the information in Klarna's data protection policies for data subjects located in Germany https://cdn.klarna.com
or for data subjects located in Austria https://cdn.klarna.com
handled.
- PayPal
If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "installment payment" via PayPal, we will transmit your payment data within the framework of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transmission is carried out in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, is included in the calculation of the score values. Further data protection information, including about the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing takes place via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit the information you provided during the order process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. The transmission of your data is exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com
9) Online Marketing
9.1 Facebook Pixel for creating Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"), is used.
If a user clicks on an advertisement placed by us and displayed on Facebook, an addition is appended to the URL of our linked page by Facebook Pixel. If our page allows data sharing with Facebook via Pixel, this URL parameter is written into the user's browser via a cookie that our linked page itself sets. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook Pixel, Facebook can, on the one hand, determine the visitors to our online offering as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are determined based on the visited websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear annoying. We can also evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called "conversion").
The data collected is anonymous for us, meaning it does not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com
The data processing associated with the use of the Facebook Pixel is carried out exclusively with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
9.2 - Google AdSense
This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses "web beacons" (small invisible graphics) to collect information, which allows simple actions such as visitor traffic on the website to be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve a transfer to the servers of Google LLC. in the USA.
Google uses the information thus obtained to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is legally required and/or if third parties process this data on behalf of Google.
All processing described above, in particular the reading of information on the end device used via cookies and/or web beacons, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Google's privacy policy can be viewed here: https://www.google.de
- Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. When using Google Ads, personal data may also be transferred to Google LLC.'s servers in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and on how Google handles data from websites can be found here: https://policies.google.com
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com
Please note that certain functions of this website may not be available or only partially available if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de
- Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display relevant ads for users, improve campaign performance reports or prevent a user from seeing the same ads multiple times. Via a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later accesses the advertiser's website using the same browser and buys something via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address. When using GMP, personal data may also be transferred to Google LLC.'s servers in the USA.
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
GMP by Google's privacy policy can be found here: https://www.google.de
9.3 Use of Affiliate Programs
- Webgains (ad pepper media GmbH)
We participate in the "Webgains" partner program of ad pepper media GmbH, FrankenStraße 150C, 90461 Nuremberg, Germany (hereinafter "Webgains").
Webgains is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based sales method that enables commercial operators of websites, so-called merchants or advertisers, to display advertisements, usually remunerated by click or sale commissions, on third-party websites, such as those of sales partners, also known as affiliates or publishers. The merchant provides an advertising medium, i.e. an advertising banner or other suitable means of internet advertising, via the affiliate network, which is then integrated by an affiliate on their own websites. In this context, we have placed advertisements as links on our website.
In doing so, we use cookies from Webgains. These are small text files that are stored on your device to track the origin of orders generated via such links. This allows Webgains, among other things, to recognize that you have clicked on the partner link on our website. This information is required for payment processing between us and Webgains. If the information also contains personal data, the described processing is carried out on the basis of our legitimate financial interest in processing commission payments with Webgains in accordance with Art. 6 Para. 1 lit. f GDPR.
Further information on data usage by Webgains can be found in Webgains' privacy policy at https://www.webgains.com
If you wish to block the evaluation of user behavior via cookies, you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally.
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection.
10) Web Analysis Services
Google (Universal) Analytics without cookies
This website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service never sets cookies on your device.
Instead, the local storage of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID.
The information generated by the ID about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; this may also involve a transfer to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal identifiability. By means of the extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC. server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet use. The IP address transmitted by your browser within the framework of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables the creation of statistics with statements about the age, gender and interests of website visitors based on an evaluation of interest-based advertising and with the involvement of third-party information, using a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized alignment of marketing measures. However, data records recorded via "demographic characteristics" cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and on Google's handling of data from websites can be found here: https://policies.google.com
All processing described above will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, you can download and install the browser plugin available at the following link:
https://tools.google.com
Alternatively to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):
Deactivate Google Analytics
We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com
11) Retargeting/ Remarketing/ Recommendation advertising
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing; we use this to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have agreed with Google that your internet and app browser history will be linked to your Google account and information from your Google account will be used to personalize ads that you view on the web. In this case, if you are logged in to Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target groups for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Remarketing and on Google's handling of data from websites can be found here: https://policies.google.com
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com
Further information and data protection regulations regarding advertising and Google can be found here:
https://www.google.com
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Pinterest Retargeting Pixel
This website integrates a pixel (Pinterest Tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest")). With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored and evaluated in pseudonymized form. The information can be assigned to the person of the user with the help of further information that Pinterest has stored about the user, e.g. due to ownership of an account on the social network "Pinterest". Pinterest analyzes the surfing behavior using an algorithm and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest can also combine the information collected via the pixel with other information that Pinterest has collected about other websites and/or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. In no case can the collected information be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
The Reach Group
On our website, cookies are used to enable the implementation of retargeting campaigns by The Reach Group GmbH (Am Karlsbad 16, 10785 Berlin, Germany). The data stored within the cookie is only an encrypted, pseudonymized user ID. The ad serving technology used utilizes a shortened and hashed IP address to evaluate the geographical region, access speed, and internet provider. In addition, the time of visit, the IDs of the products viewed, searched for, or purchased, the URLs of the viewed pages, possible search terms, and/or the IDs of the accessed categories are stored to deliver more relevant advertising content. Storage of IP or browser data only occurs in Germany and for the anonymous creation of visitor statistics and assignment of transactions. It is never possible to draw conclusions about specific persons, their exact address, location, or further personal data. No explicit transfer of IP data to third parties takes place. All information also has an expiry date of a maximum of 90 days, after which your browser automatically deletes the stored data. You can prevent the storage of cookies by a corresponding setting in your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website by activating the opt-out function under the following link: https://hal9000.redintelligence.net/privacy/8lcfmzhxc8d6/ Further information on data protection of The Reach Group GmbH can be found at https://trg.de/datenschutzerklarung/ This objection remains valid as long as the associated opt-out cookie is not deleted. This cookie is set for the domain, per browser, and user of a computer. If you access our website from multiple devices and browsers, you must therefore object to data collection separately and again on each of these devices and in each browser.
12) Page functionalities
- FontAwesome
This site uses so-called web fonts from "FontAwesome", a service of Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA ("FontAwesome"), for the uniform display of fonts. When you open a page, your browser loads the required web fonts into your browser's cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to FontAwesome's servers. This may also involve a transfer of personal data to FontAwesome's servers in the USA. In this way, FontAwesome learns that our website has been accessed via your IP address. The processing of personal data in connection with the connection to the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
Further information on FontAwesome can be found at: https://fontawesome.com
- Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you open a page, your browser loads the required web fonts into your browser's cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also involve a transfer of personal data to Google LLC.'s servers in the USA. In this way, Google learns that our website has been accessed via your IP address. The processing of personal data in connection with the connection to the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com
13) Tools and Other
13.1 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users in the form of an interactive interface when they access a page, on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. In this way, all cookies/services requiring consent are only loaded if the respective user has given corresponding consent by ticking the box. This ensures that such cookies are only set on the user's end device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the processing is also Art. 6 Para. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information about the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
13.2 - OpenStreetMap
This site uses the open-source mapping service "OpenStreetMap" from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, via an API, to show you the location of our company and to facilitate your journey.
To provide you with the OpenStreetMap map services, the service collects your IP address when you visit the page and transmits it to an OpenStreetMap server, where it is stored.
This data processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in an attractive presentation of our online offers and the easy findability of our location.
If you do not agree to the future transmission of your data to OpenStreetMap, you can completely deactivate the OpenStreetMap web service by deactivating JavaScript in your browser. OpenStreetMap and thus also the map display on this website can then no longer be used.
Further information on OpenStreetMap's data protection policy can be found at the following internet address: https://wiki.osmfoundation.org
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby the referred legal basis applies to the respective exercise requirements:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw granted consents according to Art. 7 Para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of an explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, this data will be stored until the data subject revokes their consent.
If there are statutory retention periods for data that are processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of the contract and/or we no longer have a legitimate interest in continued storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
--
As of, 02.06.2022