Data protection declaration

Privacy Policy

PRIVACY POLICY

1) Information about the collection of personal data and contact details of the controller

1.1  We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2  The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is MF DropPackage eK, Seefelderstr. 11, 84056 Rottenburg, Germany, Tel.: +49 1632693543, E-Mail: Droppackage@t-online.de. Der The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

1.3  For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Data collection when visiting our website

If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, an appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on Shopify servers other than those mentioned above will only take place within the framework communicated below.

4) Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called "session cookies"); others remain on your device for a longer period and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long cookies are stored in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract, in accordance with Art. 6 (1) (a) GDPR in the event of consent being given, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1  - LuckyOrange (LuckyOrange LLC)
This website uses technologies from Lucky Orange LLC, 8680 W 96th St, Overland Park, KS 66212, USA, (www.luckyorange.com) anonymized data is collected and stored for the purpose of web analysis and to operate the live chat system, which is used to answer live support requests. From this anonymized data, user profiles can be created under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies enable the internet browser to be recognized. The data collected using Lucky Orange technologies will not be used to personally identify the visitor to this website without the express consent of the data subject and will not be merged with personal data about the bearer of the pseudonym. If the information collected in this way is personal, the processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
To prevent Lucky Orange cookies from being stored, you can configure your internet browser to prevent cookies from being stored on your computer in the future, or to delete cookies that have already been stored. However, disabling all cookies may result in some functions on our website no longer being able to function. You can withdraw your consent to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with future effect by sending us your objection informally by email to the address provided in the imprint.
Alternatively, you can object to the collection of data by Lucky Orange in the future by setting an opt-out cookie, which you can download from the following website: https://www.luckyorange.com/privacy.php
Please do not delete this opt-out cookie as long as you wish to maintain your objection.

5.2  Review reminder by Loox
If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR, we will transmit your e-mail address and, if applicable,other previously collected customer data to the Loox rating tool, a service provided by Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel ("Loox"), so that it can send you a rating reminder by email. You can revoke your consent at any time by sending a message to the data controller or to the rating platform.
For the transmission of data to Loox in Israel, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision.
We have concluded a data processing agreement with Loox, which obligates Loox to protect our customers' data and not to share it with third parties. This agreement can be viewed here: https://loox.io/legal/data_processing_addendum.pdf
For more information about Loox’s privacy policy, please visit https://loox.io/legal/privacy_policy_merchants.pdf

5.3  Review reminder from Trustpilot
If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to the rating platform Trustpilot of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com) so that they can send you a review reminder by email.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.

5.4  When you contact us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is for the purpose of entering into a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided there are no statutory retention periods to the contrary.

5.5  WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.

If you contact us via WhatsApp regarding a specific transaction (for example, a placed order), we will store and use the mobile phone number you use for WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) (b) GDPR to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) so that we can assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will save and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data will only be used to respond to your request via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of users who have contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1) (a) GDPR by accepting the WhatsApp Terms of Use upon first use of the app on their device. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6) Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the controller at the above-mentioned address. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary, and we have no legitimate interest in continuing to store it.

7) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose will be saved and published on this website. Furthermore, your IP address will be saved for security reasons to enable identification of the author in the event of illegal comments. Your email address will be saved so that we can contact you if a third party should object to your published content as illegal.

8) Use of customer data for direct marketing

8.1  Subscribe to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. We store your IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date.The data we collect when you register for the newsletter will be used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the person responsible mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data for purposes permitted by law, about which we will inform you in this declaration.

8.2  Sending the email newsletter to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services from our range that are similar to those you have already purchased. According to Section 7 (3) of the Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

8.3  - Newsletter delivery via Klaviyo
Our e-mail newsletter is sent via the technical service provider »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we will transfer the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
To protect your data in the USA, we have a data processing agreement with Klaviyo in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.
You can view Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy

8.4  Product availability notification by email

For temporarily unavailable items, you can sign up to receive email product availability notifications. We will then send you a one-time email notification about the availability of the item you have selected. The only mandatory information required to receive this notification is your email address. Providing additional information is voluntary and may be used to contact you personally. We use the so-called double opt-in process to send emails, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. We will save your IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service on product availability will be used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

9) Data processing for order processing

9.1  - Transmission of image files for order processing via upload function
On our website, we offer customers the opportunity to request product personalization by submitting image files via an upload function. The submitted image motif will be used as a template for personalizing the selected product.
Using the upload form on the website, the customer can send one or more image files directly to us via automated, encrypted data transfer from the memory of the device used. We then collect, store, and use the transmitted files exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. No further transfer will take place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) (b) GDPR. After the order has been finally processed, the transmitted image files are automatically and completely deleted.

9.2  To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact information you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period via a suitable communication channel (e.g., by post or email) within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact information will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts.Certain personal data will be transmitted to these service providers in accordance with the following information.

9.3  To fulfill our contractual obligations to our customers, we work with external shipping partners. We will share your name, delivery address, and, if necessary for delivery, your telephone number with a shipping partner selected by us exclusively for the purpose of delivering the goods in accordance with Art. 6 (1) (b) GDPR.

9.4  Use of special service providers for order processing and fulfillment

- Printful
Order processing is carried out by the service provider "Printful" of Printful, Inc. 11025 Westlake Drive,
Charlotte, NC 28273, USA. Your name, address, and any other personal data will be passed on to Printful in accordance with Art. 6 (1) (b) GDPR solely for the purpose of processing your online order. Your data will only be passed on to the extent necessary to process your order. Details on Printful's data protection policy and the Printful, Inc. privacy policy can be found at https://www.printful.com/policies/privacy visible.

9.5  Use of payment service providers (payment services)

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used to calculate the score values. For further data protection information, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal's own payment methods and local payment methods from third parties.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “Pay later” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
If you select the PayPal payment method "Purchase on account," your payment details will first be transmitted to PayPal to prepare the payment, after which PayPal will forward them to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis is Art. 6 (1) (b) GDPR. In this case, RatePay will conduct an identity and credit check in its own name to determine your solvency in accordance with the principle outlined above and will forward your payment details to credit agencies based on its legitimate interest in determining your solvency in accordance with Art. 6 (1) (f) GDPR. A list of credit agencies that Ratepay can access can be found here: https://www.ratepay.com/legal-payment-creditagencies/
If you use a local third-party payment method, your payment data will initially be transferred to PayPal in accordance with Art. 6 (1) (b) GDPR to prepare the payment. Depending on your selection of an available local payment method, PayPal will then transfer your payment data to the relevant provider in accordance with Art. 6 (1) (b) GDPR to process the payment:
- Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further information on data protection, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank sort code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR.Your data will be shared solely for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection policy can be found at the following website address: https://www.shopify.com/legal/privacy.
Data protection information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

10) Online Marketing

Facebook Pixel for creating custom audiences with advanced data matching (with cookie consent tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the extended data matching mode, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
Based on their express consent, when a user clicks on an ad displayed on Facebook and placed by us, a suffix is ​​added to the URL of our linked page using Facebook Pixel. This URL parameter is then written to the user's browser via a cookie, which our linked page itself sets. In addition, this cookie records specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during transactions such as purchases, account registrations, or registrations (extended data matching). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with advanced data matching, Facebook is able to precisely define visitors to our online offering as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel with advanced data matching to display the Facebook ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of Facebook Pixel, the enhanced matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve ads on and off Facebook.
These processing operations are carried out exclusively with the granting of express consent in accordance with Art. 6 (1) (a) GDPR.
The information generated by Facebook is usually transferred to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA.You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

11) Web analysis services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is typically transferred to a Google server and stored there. This may also include transmission to Google LLC servers in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that the IP address is anonymized by shortening it and prevents it from being directly linked to a person. This extension means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also uses a special feature called "demographic features" to compile statistics about the age, gender, and interests of site visitors based on an analysis of interest-based advertising and third-party information. This allows the definition and differentiation of website user groups for the purpose of targeting marketing measures. However, data collected using "demographic features" cannot be assigned to a specific individual.
Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to share it with third parties.
For the transfer of data from the EU to the USA, Google relies on the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

12) Retargeting/ Remarketing/ Recommendation Advertising

Google Ads Remarketing
Our website uses Google Ads Remarketing, which allows us to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5.W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have agreed to Google linking your internet and app browsing history with your Google Account and using information from your Google Account to personalize ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.
Details on the processing initiated by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/ads/answer/7395996?
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

Pinterest retargeting pixel
This website incorporates a pixel (Pinterest Tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest")). With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored, and analyzed in pseudonymized form. The information can be assigned to the user's identity with the help of additional information that Pinterest has stored about the user, e.g. due to the user's account on the "Pinterest" social network. Pinterest analyzes surfing behavior using an algorithm and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest can also combine the information collected via the pixel with other information that Pinterest has collected via other websites and/or in connection with the use of the "Pinterest" social network, thereby creating pseudonymized user profiles. Under no circumstances can the information collected be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

Snap Pixel (Snapchat)
This website uses the “Snapchat Pixel”, a tracking technology of the social network Snapchat of Snap Inc., 63 Market Street, Venice, CA 90291, USA (“Snapchat”).
If you accessed our website from an ad on Snapchat, we will place a cookie on your computer that interacts with JavaScript code also implemented by Snapchat. Cookies are small text files that are stored on your device.
If a user is redirected from a Snapchat ad to pages on this website, the pixel records certain user actions predefined by us and can track them (e.g., completed transactions, leads, search queries on the website, visits to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Snapchat server via the Snapchat pixel, transmitting certain information about the action (including the type of action, time, and device browser type).
Through this transmission, Snapchat can compile statistics about user behavior on our website after redirection from an ad, which we use to optimize our offering. However, we do not receive any information that can be used to personally identify users.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Snapchat for the use of the Snapchat Pixel ("Data Processing Agreement", available at https://www.snap.com/es/terms/data-processing-agreement), which obligates Snapchat to protect the data of our site visitors and not to share it with third parties. Snapchat generally transmits collected information outside the European Economic Area and relies on the European Commission's standard data protection clauses, which are intended to ensure compliance with European data protection standards.

TikTok Pixel
This website uses the “TikTok Pixel”, a tracking technology of the social network “TikTok” of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).
With the help of cookies (small text files stored on the device used), information about surfing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there, and evaluated in order to then enable the display of interest-based and personalized product recommendations on TikTok. The information collected and processed pseudonymously generally includes the device ID, device type, timestamp, operating system used, and IP address. This information can be assigned to the user's identity with the help of other information that TikTok has stored about the user, for example, due to the user's ownership of an account on the social network "TikTok."TikTok may also combine the information collected via the pixel with other information TikTok has collected from other websites and/or in connection with the use of the social network "TikTok," thereby creating pseudonymized user profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok pixel also enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from a TikTok ad to pages on this website and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track these (e.g. completed transactions, leads, search queries on the website, visits to product pages). When such an action is carried out, your browser sends an HTTP request from the cookie to the TikTok server via the TikTok pixel, which transmits certain information about the action. Through this transmission, TikTok can compile statistics about user behavior on our website after redirection from a TikTok ad, which we use to optimize our offering.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our site visitors and not to pass it on to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with European data protection standards.

13) Page functionalities

13.1  Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This uses the extended data protection mode, which, according to the provider, only saves user information when the video(s) is played. If embedded YouTube videos are started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want to be assigned to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website, using alternative options communicated to you on the website.
Further information on data protection at “YouTube” can be found in the YouTube Terms of Use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy

13.2  Use of Vimeo videos
Our website contains plug-ins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you access a page on our website that contains such a plug-in, your browser establishes a direct connection to Vimeo's servers. Vimeo transmits the content of the plug-in directly to your browser and integrates it into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted from your browser directly to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (e.g., by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to directly assign the data collected via our website to your Vimeo account, you must log out of Vimeo before visiting our website.
For information on the purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your rights and settings options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy
For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics is provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking function, which we have no access to and which we cannot influence. Google Analytics uses so-called "cookies" for tracking purposes. These are text files saved on your computer that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is usually transferred to a Google server and stored there; this may also be transferred to the servers of Google LLC in the USA.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, Vimeo videos will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future.To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website via alternative options communicated to you on the website.

14) Tools and Other

Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the page in the form of an interactive user interface, where consent for specific cookies and/or cookie-based applications can be given by checking the appropriate boxes. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by checking the appropriate boxes. This ensures that such cookies are only placed on the user's device if consent has been given.
The tool uses technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for processing is Art. 6 (1) (c) GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

15) Rights of the data subject

15.1  The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising them:

  • Right to information pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to information pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 (3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2  RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right of objection as described above.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of the processing and – where applicable – also by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of an express consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that are processed within the framework of legal transactions or obligations similar to legal transactions on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required to fulfil or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.