Privacy policy

Privacy Policy

The purpose of this Privacy Policy is to inform you and the public about the type, scope, and purpose of the personal data we collect, use, and process, and to explain the rights to which you are entitled.

  1. Definitions

The terminology of the General Data Protection Regulation (GDPR) forms the basis of our Privacy Policy. When we use the following terms in our Privacy Policy, they have the following meanings:

  • personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter the 'data subject'). A person is deemed 'identifiable' if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier, or by reference to one or more specific factors expressing the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

  • data subject

A person is “affected” if their personal data are processed by the controller.

  • Processing

"Processing" is understood to mean any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

  • Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

  • Profiling

"Profiling" refers to the automated processing of personal data intended for the evaluation, analysis, or prediction of aspects (in particular with regard to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements).

  • Pseudonymization

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure the personal data are not assigned to an identified or identifiable natural person.

  • Controller or controller responsible for processing

The controller or controller responsible for processing is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or by the law of the Member States.

  • Processor

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

  • Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, irrespective of whether it is a third party or not. However, public authorities that may receive personal data in the course of a specific investigatory mandate under Union law or the law of the Member States are not regarded as recipients.

  • Third party

Third party means a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or the processor, are authorised to process personal data.

  • Consent

Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, given for the specific case, in the form of a statement or other clear affirmative action by which the data subject signifies that he or she agrees to the processing of personal data concerning him or her.

Name and address of the controller responsible for processing

Schrumpfmich GmbH; represented by the Managing Director Peter Schulz

13 Ludgerus Street, 48324 Sendenhorst

Phone: 0176 82137617

Email: info@schrumpfmich.de

  1. Collection of Data and Legal Basis for Processing

In the context of an order, the legal basis for processing personal data is the handling of the order and the performance of the contract to which the data subject is a party. The processing is based on Art. 6(1)(b) GDPR.

In the context of contacting us independently of an order (e.g., via email or the contact form), the legal basis is our legitimate interest in processing your inquiry. The processing is based on Article 6(1)(f) GDPR.

In the case of direct marketing, the legal basis is our legitimate interest. The processing is based on Article 6(1)(f) GDPR.

Where personal data are processed based on explicit consent, the legal basis for processing personal data is consent pursuant to Art. 6(1)(a) GDPR.

In the context of processing personal data based on contractual obligations regarding updates for goods with digital elements or for digital products, the legal basis is our statutory duty to inform pursuant to Art. 6(1)(c) GDPR.

  1. a) Collection of general data and information

When you access our website, information of a general nature is collected automatically. This information (so-called “server log files”) includes, for example, the type of Internet browser, the operating system used, the domain name of your Internet service provider, and similar data. This information does not allow any conclusions to be drawn about you personally. It is technically necessary to correctly deliver the web content you request and is inevitably generated when using the Internet. We statistically evaluate anonymous information of this kind to optimize our online presence and the underlying technology.

The following information is collected and stored when you access our website:

  • IP address of your PC or your internet-enabled device
  • Access date
  • Name and URL of the retrieved file,
  • Referrer URL
  • Browser / Operating System / Access Provider

The collection and storage of data serve the following purposes:

  • Establishing the website connection,
  • Technical Use of the Website,
  • System security
  • Administration.

Data processing is carried out pursuant to Art. 6(1) sentence 1 point (f) GDPR.

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can identify an encrypted connection by the string "https://" and the padlock icon in your browser’s address bar.

  1. b) Registration and ordering on our website

If you register on our website or create a user account, personal data about you will also be collected in the process. Please note that, while registration may provide extended access to content on our websites, it is not a mandatory prerequisite for using our website. The specific personal data transmitted to the controller are apparent from the respective input form used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for disclosure to one or more processors, for example, a parcel service provider for postal delivery to you, who likewise use the personal data solely for internal purposes attributable to the controller.

During a registration process on our website, the data you enter during registration will be stored.

The purpose of collecting and storing data is:

  • Customer Identification
  • Processing and fulfillment of the order and correspondence with you
  • Financial reporting
  • for the settlement of any liability claims that may exist, as well as the assertion of any claims against you
  • technical administration of the website
  • Administration

Your consent will be obtained during the ordering process prior to the processing of this data.

Data processing is carried out pursuant to Art. 6(1)(b) GDPR.

  1. c) Newsletter

If you voluntarily subscribe to our newsletter (a regular promotional information email with offers or other information from our company), the data you provide will be used solely for this purpose and will not be disclosed to third parties.

This also includes information that is relevant to the service or the registration. The validity of the email address is verified using the so-called “double opt-in” procedure. For this purpose, the newsletter subscription is verified by sending a confirmation email and checking the reply. No further data are collected.

You may unsubscribe from the newsletter (withdraw your consent) at any time, either by sending a message to the contact method described below or via the link provided for this purpose in the newsletter. No costs will be incurred other than the standard transmission costs (e.g., telephone call charges). Data processing based on your consent is carried out pursuant to Art. 6(1) sentence 1 (a) GDPR.


  1. d) Dispatch of the newsletter

Existing customers

We reserve the right to send you, by email, regular offers for goods or services similar to those you have already purchased from our range. For this, we are not required to obtain separate consent from you pursuant to § 7 Abs. 3 UWG. In this respect, processing of your data is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6 Abs. 1 lit. f DSGVO. If you initially objected to the use of your email address for this purpose, we will not send any emails. You are entitled to object at any time, with effect for the future, to the use of your email address for the aforementioned advertising purpose by notifying the controller named at the beginning. You will incur only transmission costs according to the basic rates for this. Upon receipt of your objection, your email address will be removed from the mailing list.

Contact option via the website

If you send us inquiries via the contact form or by email, the information you provide in the inquiry form or the email, including the contact details you provide there, will be stored by us for the purpose of processing your inquiry and/or contacting the data subject. We do not disclose this data to third parties. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Data processing based on your consent is carried out pursuant to Art. 6(1) sentence 1(a) GDPR. The personal data collected for use of the contact form are automatically deleted once your inquiry has been resolved. You have the right to withdraw your consent to data processing at any time.

  1. e) Comment function in the blog on the website

When comments are posted on our site, the chosen username is also recorded and stored alongside this information so that unlawful content can be traced and pursued to relieve us of liability.

  1. Retention period / Collection and storage of personal data, as well as the nature and purpose of their use / Disclosure of data

The purpose of the transmitted personal data is customer identification, performance of contracts, order processing, customer correspondence, invoicing, direct marketing, as well as the handling of any potential liability claims or the enforcement of any claims against you.

As a general rule, your stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

We store the personal data collected for processing your order and transmitted to us until the statutory retention period expires. Thereafter, your data will be deleted by us, unless, pursuant to Article 6(1) sentence 1 point (c) GDPR, due to tax and commercial law retention and documentation obligations (arising from the HGB, StGB, or AO) or are obligated by statutory information obligations to retain data for a longer period, or you have consented to further retention pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

If you contact us independently of an order (e.g., via email or the contact form), we will store your data until the processing of your inquiry and the related matter have been completed and no statutory retention obligations apply.

When processing personal data on the basis of explicit consent, we retain the data until the data subject revokes their consent.

Within the scope of processing personal data on the basis of Art. 6(1)(f) GDPR, we retain this data until the right to object pursuant to Art. 21(1) GDPR is exercised by the data subject.

We store in the context of processing personal data on the basis of Art. 6(1)(f) GDPR for the purpose of direct marketing, these data until the right to object pursuant to Art. 21(1) GDPR is exercised by the data subject.

If, pursuant to our contractual obligations, we must offer updates for goods with digital elements or for digital products, we will use the data you provided in the context of the order to inform you about updates (via email or by post).

Disclosure of Data

Your personal data are disclosed by us to third parties solely to the service partners involved in executing the contract, for example the logistics company entrusted with delivery and the credit institution tasked with payment matters. Whenever your personal data are passed on to third parties, the scope of the data transmitted is always limited to the necessary minimum.

Your personal data will not be transmitted to third parties for purposes other than those set out below.

We disclose your personal data to third parties only if:

  • you have given your explicit consent to this pursuant to Art. 6(1) sentence 1 point (a) GDPR,
  • the disclosure pursuant to Article 6(1) sentence 1 point (f) GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest warranting protection in the non-disclosure of your data,
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6(1) sentence 1 point (c) GDPR, as well as
  • this is legally permissible and, under Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the performance of contracts with you.
  1. Obligation to provide - possible consequences of not providing

The provision of personal data is in part required by law (tax law) and may also arise from contractual provisions (transparency of the contracting party). Failure to provide personal data would prevent the conclusion of a contract and therefore does not take place. Any information about the provision of personal data required by law or contract will be provided to you by the controller.

  1. Existence of automated decision-making

We do not employ automated decision-making or profiling.

  1. Routine deletion and blocking of personal data

When the retention period, explained in greater detail above under 4., has expired, the personal data will be routinely erased.

  1. Rights of the data subject

As a data subject, you have the following rights:

  • Article 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if they were not collected by us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
  • Art. 16 GDPR: You have the right to request the rectification of inaccurate personal data we have stored about you, or to have your personal data completed;
  • Art. 17 GDPR: You have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • Article 18 GDPR: You have the right to request restriction of the processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims, or you have lodged an objection to the processing pursuant to Article 21 GDPR;
  • Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller;
  • Art. 7(3) GDPR: You have the right to withdraw the consent you have granted to data processing. As a result, we may no longer continue, with effect for the future, the data processing that was based on this consent;
  • Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority at your habitual residence or place of work, or at our registered office, regarding the processing of data (right to lodge a complaint).

8.1 Right to Object

  • You have the right, on grounds arising from your particular situation, to object at any time to the processing of personal data concerning you that takes place on the basis of Art. 6(1)(e) or (f) GDPR, insofar as there are reasons relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object.
  1. Cookies

Use, Legal Basis, and Purpose

To enable us to optimally design the scope of functions and the technical presentation of our website, and to continue optimizing them, we use so-called "cookies." These are small text files that are placed on, or stored on, your device. With the help of these "cookies," data can be stored on your computer when you access our website.

We also use cookies on our website that allow us to analyze users’ browsing behavior.

When our website is accessed, the user is informed about the use of cookies for analytics purposes, and consent to the processing of the personal data used in this context is obtained. In this context, a reference to this Privacy Policy is also provided.

The legal basis for processing personal data when using technically necessary cookies is Article 6(1)(f) GDPR.

The legal basis for processing personal data using cookies for analytical purposes, where the user has given the relevant consent, is Art. 6(1)(a) GDPR.

The purpose of using technically necessary cookies is to make the use of websites easier for users. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser be recognized again even after navigating to a different page. We require cookies for the following applications: retention of language preferences. The user data collected by technically necessary cookies are not used to create user profiles.

The use of analytics cookies serves the purpose of improving the quality of our website and its content. Through analytics cookies, we learn how the website is used and can thus continuously optimize our offering.

Duration of storage, right to object and option for erasure

Cookies are stored on the user's computer and transmitted from there to our site. Accordingly, you as the user have full control over the use of cookies. By adjusting the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also occur automatically. If cookies are disabled for our website, it may no longer be possible to use all of the website’s functions in full.

  1. Social Media

Data processing in social media

Our company is active on various social media. As part of communications with users, users’ data may be processed outside the European Union, which may entail risks due to the increased difficulty of enforcing rights. With regard to US providers certified under the Privacy Shield, we point out that by doing so they undertake to comply with EU data protection standards.

As a general rule, user data is processed for advertising and market research purposes in order to create usage profiles from usage behavior. These usage profiles may be used, for instance, to place targeted advertisements. For these purposes, cookies are generally stored on users’ computers, in which users’ usage behavior and interests are stored.

Legal basis for processing:

The legal basis for the processing of users' personal data is our legitimate interest in the effective provision of information to users and communication with users pursuant to Art. 6 (1)(f) GDPR. If users are asked by the respective platform providers to consent to the data processing described above, the legal basis for the processing is Art. 6(1)(a), Art. 7 GDPR.

The respective provider has the fastest access to the user data. It can take the most effective measures. The data subject's rights can therefore be asserted most swiftly directly with the provider. Otherwise, we remain at your disposal at all times.

Facebook

As part of our website, we integrate the so-called social plugins ("Plugins") of the Facebook social network, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are identified by a Facebook logo or the label "Social Plugin from Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The plugin's content is transmitted by Facebook directly to your browser and integrated into the page. By means of this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a server of Meta Platforms Inc. in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

Under https://de-de.facebook.com/about/privacy/ it explains which settings options Facebook offers to protect the data subject's privacy.

Instagram

Part of our website includes the integration of the so-called social plugin ("Plugins") from Instagram, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The plugins are identified by an Instagram logo, for example in the form of an "Instagram camera." The plugins are identified by an Instagram logo, for example in the form of an "Instagram camera." An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and embedded into the page. By means of this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to a server of Meta Platforms in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is likewise transmitted directly to a server of Instagram and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins by using add-ons for your browser, e.g., the script blocker "NoScript" (http://noscript.net/).

Further information and Instagram's applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ abgerufen werden.

Twitter

Our website incorporates the so-called social plugins ("plugins") of the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are marked with a Twitter logo, for example in the form of a blue "Twitter bird." When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Twitter’s servers. The content of the plugin is transmitted by Twitter directly to your browser and embedded in the page. Through this integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with Twitter or are not currently logged in to Twitter. This information (including your IP address) is transmitted by your browser directly to a Twitter server in the USA and stored there. If you are logged in to Twitter, Twitter can directly associate your visit to our website with your Twitter account. If you interact with the plugins, for example by pressing the "Tweet" button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed there to your contacts. For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your rights in this regard and settings options to protect your privacy, please refer to Twitter’s privacy policy: https://twitter.com/privacy If you do not want Twitter to directly assign the data collected via our website to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g., with the script blocker "NoScript" (http://noscript.net/).

The applicable data protection provisions of Twitter can be found at https://twitter.com/privacy?lang=de available.

YouTube

Part of our website is the integration of YouTube. This is an online video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate, and comment on them free of charge. YouTube permits the publication of all types of videos; therefore, full-length films and television programs, as well as music videos, trailers, and user-generated videos, can be accessed via the online portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

As soon as you visit pages of our website that are equipped with a YouTube plugin, a connection to YouTube’s servers is established. In doing so, the YouTube server is informed which specific page of our website you have visited. If, in addition, you are logged into your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this potential assignment by logging out of your account beforehand. For further information on the collection and use of your data by YouTube, please refer to its privacy notices at www.youtube.com 

The privacy policy published by YouTube provides information about the collection, processing, and use of personal data by YouTube and Google.

Xing
 
Our website uses features of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing features is accessed, a connection to Xing’s servers is established. To our knowledge, no personal data are stored in this process. In particular, IP addresses are not stored, nor is usage behavior analyzed.
Further information on data protection and the Xing Share button can be found in Xing’s privacy policy at https://www.xing.com/app/share?op=data_protection
 
LinkedIn
 
Our website may use social plugins ("Plugins") of the social network "LinkedIn", which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The Plugins are marked with a LinkedIn logo or the designation " LinkedIn Social Plugin". If you access a website of Messe Düsseldorf GmbH that contains such a Plugin, clicking the icon establishes a direct connection to the servers of LinkedIn. The content of the Plugin is transmitted by LinkedIn directly to your browser and integrated by it into the webpage. By integrating the Plugins, LinkedIn receives the information that you have accessed the corresponding page of our website. If you are logged in to LinkedIn, LinkedIn can associate your visit with your LinkedIn account. If you interact with the Plugins, for example by posting a comment, the corresponding information is transmitted by your browser directly to LinkedIn and stored there. For information on the purpose and scope of data collection, the further processing and use of the data by LinkedIn, as well as your rights in this regard and options to protect your privacy, please refer http://www.linkedin.com/legal/privacy-policy. If you do not want LinkedIn to collect data about you via our website when using the plugin, you must log out of LinkedIn before visiting our website.

Tumblr
 
This offering uses the buttons of the Tumbler service. These buttons are provided by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, hilfe@tumblr.com. They are identifiable by the term "Tumblr." With the help of these buttons, it is possible to share a post or page from this offering on Tumblr or to follow the provider on Tumblr.

When a user accesses a page of this website that contains such a button, their browser establishes a direct connection to Tumblr’s servers. The content of the Tumblr button is transmitted by Tumblr directly to the user’s browser. The provider therefore has no influence on the scope of the data that Tumblr collects with the aid of this plugin and informs users to the best of its knowledge. According to this information, only the user’s IP address and the URL of the respective website are transmitted when the button is retrieved, and they are not used for purposes other than displaying the button.
Further information on this can be found in Tumblr's Privacy Policy at www.tumblr.com/policy/de/privacy.

Pinterest

Our website includes the "Pin it" button of the social network Pinterest, which is operated by Pinterest, Inc.—located at 808 Brannan St, San Francisco, CA 94103, USA. By using the "Pin it" button, Pinterest receives information that you have visited one of our web pages. If you are logged into your Pinterest account at the same time, Pinterest can also associate your visit with your Pinterest account. By clicking the "Pin it" button, data is transmitted to Pinterest and stored on servers (in the USA). If you wish to prevent this, you must log out of your Pinterest account before clicking the "Pin it" button. To protect your privacy, please refer to Pinterest’s privacy notices for further details on the collection, processing, and use of your data by Pinterest, as well as your legal options and configuration settings, at: http://pinterest.com/about/privacy/

Meetup

We use the service provider meetup. A Meetup group is a local community that organizes Meetups at which members meet in person, in real life, at a location. Meetup is operated by WeWork Companies Inc., Operated at 115 W 18th St., New York, NY 10011, USA. In order to protect your privacy, please refer to the meetup privacy notice for further details on the collection, processing, and use of your data by meetup, as well as your legal options and settings choices, at: https://www.meetup.com/de-DE/privacy/

  1. Online Marketing

Use of GoogleMaps

We use the Google Maps embedding function provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website.
The function enables the visual presentation of geographic information and interactive maps.
In this context, when pages in which Google Maps is embedded are accessed, Google also collects, processes, and uses data about visitors to those pages. You can find more detailed information on Google's collection and use of data in Google's privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option in the Privacy Center to change your settings so that you can manage and protect your data processed by Google.
Where applicable, your data may also be transmitted to the USA. An adequacy decision by the European Commission is in place for data transfers to the USA.
You have the right, on grounds arising from your particular situation, to object at any time to this processing of personal data concerning you that is based on Article 6(1)(f) GDPR.
To do this, you must disable JavaScript in your browser. However, please note that, in this case, you may not be able to make full use of all features of this website, such as the interactive map display.
 

Use of Google reCAPTCHA

We use the reCAPTCHA service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The query serves to determine whether the input is made by a human or by automated, machine processing. The query includes the transmission to Google of the IP address and, where applicable, other data required by Google for the reCAPTCHA service. For this purpose, your input is transmitted to Google and further used there. However, your IP address will first be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCAPTCHA will not be merged with other Google data. Your data may also be transmitted to the USA. For data transfers to the USA, an adequacy decision of the European Commission, the "Privacy Shield," is in place. Google participates in the "Privacy Shield" and has committed to its provisions. By activating the query, you consent to the processing of your data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google reCAPTCHA as well as the corresponding privacy policy can be found at: https://www.google.com/privacy/ads/

DoubleClick by Google

This website uses the DoubleClick by Google online marketing tool operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("DoubleClick").

DoubleClick uses cookies to display advertisements that are relevant to users, to improve reports on campaign performance, or to prevent a user from seeing the same advertisements multiple times. Using a cookie ID, Google records which advertisements are served in which browser and can thus prevent them from being displayed repeatedly. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website pursuant to Article 6(1)(f) GDPR.

Furthermore, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This occurs, for example, when a user views a DoubleClick ad and later, using the same browser, visits the advertiser's website and makes a purchase there. According to Google, DoubleClick cookies do not contain personal data.

Due to the marketing tools in use, your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope and further use of the data that Google collects through this tool and therefore inform you to the best of our knowledge: By integrating DoubleClick, Google receives information that you have accessed the relevant part of our website or clicked one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, the provider may still obtain and store your IP address.

If you wish to object to participation in this tracking process, you can disable cookies for conversion tracking by configuring your browser to block cookies from the domain www.googleadservices.com, or via https://www.google.de/settings/ads; however, this setting will be deleted when you clear your cookies. Alternatively, you can obtain information about the placement of cookies and make corresponding settings through the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to notify you about the placement of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.

At the following internet address, you will find further information about the privacy policy of DoubleClick by Google: http://www.google.de/policies/privacy/

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdSense uses so-called "DoubleClick DART Cookies" ("Cookies"). These are text files that are stored on your computer and enable an analysis of your use of the website. In addition, to collect information Google AdSense also uses so-called "web beacons" (small invisible graphics), the use of which allows simple actions such as visitor traffic on the website to be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server in the USA and stored there.

Google uses the information obtained in this way to conduct an analysis of your usage behavior in relation to AdSense advertisements. The IP address transmitted by your browser in the context of Google AdSense is not combined with other data by Google. The information collected by Google may be transferred to third parties where required by law and/or where third parties process this data on Google’s behalf.

The data processing described is carried out pursuant to Article 6(1)(f) GDPR for the purpose of targeted advertising addressed to the user by third-party advertisers, whose ads are displayed on this website based on the analyzed user behavior. Likewise, the processing serves our financial interest in exploiting the economic potential of our online presence by displaying personalized third-party advertising content for consideration.

At the following internet address, you can find further information on Google's privacy policy: http://www.google.de/policies/privacy/

You can permanently disable cookies for advertising preferences by blocking them via an appropriate setting in your browser software, or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available, or may only be available in a limited manner, if you have disabled the use of cookies.

Google AdWords

Part of our website includes integration of the so-called Google AdWords service. This is an online advertising service that allows advertisers to place ads both in Google’s search engine results and within the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance, by means of which an ad will be displayed in Google’s search engine results only when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, ads are distributed to topic-relevant websites by an automated algorithm, taking into account the previously defined keywords.

The operating company providing the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party companies’ websites and in the search results of the Google search engine, as well as to display third-party advertising on our website. The data subject may prevent our website from setting cookies at any time, as already described above, by configuring the web browser used accordingly and thereby permanently object to the setting of cookies. Such a configuration of the web browser used would also prevent Google from placing a conversion cookie on the data subject’s information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the web browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do so, the data subject must access the link www.google.de/settings/ads from each of the Internet browsers they use and configure the desired settings there.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ be retrieved.

Google Analytics (with anonymization function)

Part of our website is the integration of the service known as Google Analytics. This is a web analytics service of Google Inc. ("Google"). Google Analytics uses so-called "cookies". These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will, however, be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the website operator, Google will use the information obtained to compile reports on website activity and to provide other services related to the use of the website and the internet to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use all functions of this website in full. You can also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by the at the following link http://tools.google.com/dlpage/gaoptout?hl=de download and install the available browser plugin.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html be retrieved. Google Analytics is available at this link https://www.google.com/intl/de_de/analytics explained in more detail.

Google+


Our website uses so-called social plugins (“plugins”) of the Google+ social network, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The plugins can be recognized, for example, by buttons with the “+1” symbol on a white or colored background. An overview of Google plugins and their appearance can be found here: https://developers.google.com/+/plugins When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google+ profile or are not currently logged in to Google+. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there. If you are logged in to Google+, Google can directly associate your visit to our website with your Google+ profile. If you interact with the plugins, for example by pressing the “+1” button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed to your contacts there. Please refer to Google’s privacy notices for the purpose and scope of data collection, the further processing and use of the data by Google, and your rights and settings to protect your privacy: http://www.google.com/intl/de/+/policy/+1button.html If you do not want Google to directly assign the data collected via our website to your Google+ profile, you must log out of Google+ before visiting our website. You can also completely prevent Google plugins from loading by using add-ons for your browser, e.g., the script blocker “NoScript” (http://noscript.net/).

Retargeting releva


This website uses retargeting technology from releva GmbH, Feilner St. 10, 10969 Berlin (www.releva.nz). This enables us to target visitors to our websites with personalised, interest-based advertising. The display of advertising materials is based on a cookie-based analysis of prior usage behaviour, without any personal data being stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to capture pseudonymised data about your interests as part of a pseudonymised user profile and thus tailor advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. This results in advertising being displayed that is highly likely to match your product and information interests. Insofar as the information collected constitutes personal data, processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in displaying personalised advertising and in market research.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not combined with personal data about the holder of the pseudonym. To generally object to the use of cookies on your computer, you can configure your internet browser so that no cookies can be stored on your computer in the future or so that cookies already stored are deleted. You can also permanently object to the placement of cookies or the creation of a pseudonymized user profile by using the available opt-out function via the following link:

https://releva.nz/datenschutz

You can view further information and the privacy policy regarding advertising and releva GmbH at https://releva.nz/datenschutz


  1. Payment processing

PayPal

Our website incorporates components from PayPal. PayPal is an online payment service provider. Payments are processed via accounts that constitute virtual personal or business accounts. PayPal also enables virtual payments to be made by credit card if a user does not hold an account. An account is managed via an email address, which is why there is no traditional account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also performs escrow functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you use these payment options, we will transmit to PayPal the personal data required for payment processing. As a rule, the scope of the personal data transmitted comprises: first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for processing the payment. Also necessary for performance of the purchase contract are personal data associated with the respective order.

The purpose of sharing data is to process payments and prevent fraud. We will transmit data to PayPal in particular where there is a legitimate interest in doing so. Under its own privacy policy, PayPal may transmit the personal data it receives to credit agencies. This transmission serves to verify identity and creditworthiness. Where necessary to fulfill contractual obligations or for processing on its behalf, PayPal may share personal data with affiliated companies and service providers or subcontractors. The data subject may withdraw consent to the handling of personal data at any time by notifying PayPal. Withdrawal does not affect personal data that must necessarily be processed, used, or transmitted for (contractual) payment processing.

The transfer of data to PayPal described in this section will expressly occur only if you select this payment option.

The applicable PayPal Privacy Policy can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full be retrieved.

Klarna

Our website incorporates components from Klarna. Klarna is a payment service that enables cashless payment for products and services via the Internet. Klarna implements a technical process by which the online merchant receives immediate payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order is placed.

The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If the data subject selects "Klarna" as the payment method during the ordering process in our online shop, the data of the data subject will be transmitted to Klarna automatically. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.


The personal data exchanged with Klarna include first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. The transmission of the data serves the purposes of payment processing and fraud prevention. The controller will also transmit other personal data to Klarna where there is a legitimate interest in the transmission. The personal data exchanged between Klarna and the controller may be transmitted by Klarna to credit reference agencies. This transmission is for the purpose of identity and creditworthiness verification.

Klarna may share personal data with affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfil contractual obligations or where the data are to be processed on its behalf.

The data subject may withdraw consent to the processing of personal data at any time to Klarna. Such revocation does not affect personal data that must necessarily be processed, used, or transmitted for (contractually compliant) payment processing.

The applicable Klarna data protection provisions can be accessed at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

Amazon Pay

The Amazon Payments payment method allows customers to use the payment details and payment methods stored on Amazon.de to pay in our online shop through their Amazon account.

If the Amazon Payments payment method is selected, payment processing is carried out directly by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg. If the customer selects "Amazon Payments" as the payment method during the online ordering process, they must first sign in with their Amazon account credentials. Amazon Payments uses the information from the customer's Amazon account to first identify the customer and subsequently process the payment.

In the case of payment via Amazon Payments, the General Terms and Conditions and the privacy policy of Amazon Payments Europe S.C.A. also apply. You can find these on the website https://payments.amazon.de

JTL-eazyAuction

Order processing via the JTL-eazyAuction product is carried out by the service provider “JTL-Software” (JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven). Name, address, and, where applicable, other personal data are transmitted to JTL-Software solely for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data will only be disclosed to the extent actually necessary for processing the order and thus fulfilling contractual obligations. Details on data protection at JTL-Software and the privacy policy of JTL-Software-GmbH can be viewed at the following link: https://www.jtl-software.de/datenschutz.


Google Pay


If you choose the "Google Pay" payment method [by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google")], payment will be processed via the "Google Pay" app on the respective mobile device (system requirements: Android 4.4 or higher and NFC functionality).

The charge is made to the payment card stored in Google Pay or to a payment system verified there (e.g., PayPal). For payments over 25 €, you must first unlock your mobile device using the respective verification method.

Google thereafter transmits the payment information stored with Google Pay in the form of a single-use virtual card number—which contains no information about the actual payment instrument stored with Google Pay—to the merchant for payment verification.

For all payments, Google Pay acts solely as an intermediary. The execution of the transaction occurs exclusively in the relationship between the user and the originating website by charging the payment method stored with Google Pay.

The information communicated in the course of the ordering process, together with the order information, is transmitted to Google.

The disclosure and processing of data is carried out for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR.


Google may collect data for every payment made via Google Pay.

These include:

  • Registration information
  • Information obtained from third parties:
  • Transaction information


This processing is carried out on the basis of the legitimate interest in proper accounting, the verification of transaction data, and the optimization and maintenance of the functionality of the Google Pay service pursuant to Art. 6(1)(f) GDPR. If data are collected in other Google services, Google may combine such data with the data collected in the course of the payment transaction.


Further terms of use for Google Pay can be found at:


https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de


Further information on data protection for Google Pay can be found at:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de


Apple Pay


If you choose the "Apple Pay" payment method [by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter "Apple")], payment processing is carried out via the Apple Pay feature of the respective device (system requirements: macOS, iOS, or watchOS).

The debit will be made to the payment card stored in "Apple Pay". For any payment, authorization via your device’s respective verification method is required.

Apple Pay uses security features built into your device’s hardware and software to protect your transactions. According to Apple, Apple Pay is designed to protect your personal data. Apple does not store the original credit, debit, or prepaid card numbers used with Apple Pay and has no access to them. Apple also does not store transaction data that could be used to identify you when you use Apple Pay with credit, debit, or prepaid cards. Your transactions are visible only to you, the merchant or developer, and your bank or card issuer.


For payment processing, the information provided during the ordering process, along with order details, is transmitted to Apple in encrypted form. Apple then re-encrypts this data and forwards it to the payment service configured in Apple Pay.

Once the payment has been completed, Apple transmits your Device Account Number together with the transaction-specific, dynamic security code to the app or website. Neither Apple nor your device transmits the actual number of your payment card to the app.

The transfer is carried out for the purpose of payment processing pursuant to Article 6(1)(b) GDPR. If personal data are processed in the course of the described disclosures, the processing is carried out solely for the purpose of payment processing pursuant to Article 6(1)(b) GDPR.


Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization eliminates any possibility of personal identification. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.


When you use Apple Pay on iPhone or Apple Watch to confirm a purchase you made in Safari on Mac, the Mac and the authorizing device communicate over an encrypted channel on Apple’s servers. Apple does not retain any of this information in a form that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Select "Wallet & Apple Pay" and disable "Allow Payments on Mac".


Further information on data protection regarding Apple Pay can be found at: https://support.apple.com/de-de/HT203027