Privacy Policy
1. Privacy Policy
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The contact details of the operator can be found in the section “Notice on the Responsible Party” in this privacy policy.How do we collect your data?
Some data is collected when you provide it to us. This may include data that you enter in a contact form. Other data is automatically collected by our IT systems when you visit the website, either automatically or with your consent. These include technical data (e.g., internet browser, operating system, or time of page access). The collection of this data happens automatically as soon as you enter this website.What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.What rights do you have regarding your data?
You have the right to obtain free information at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Additionally, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this or any other questions on the subject of data protection.Analysis Tools and Third-Party Tools
When visiting this website, your surfing behavior may be statistically analyzed. This is mainly done using so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.2. Hosting
We host our website content with the following provider:DomainFactory
The provider is DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich (hereinafter “DomainFactory”). When you visit our website, DomainFactory collects various log files, including your IP addresses. For details, please refer to the DomainFactory privacy policy: https://www.df.eu/de/datenschutz/. The use of DomainFactory is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) under the TTDSG. Consent can be revoked at any time.Contract Data Processing
We have entered into a contract for order processing (AVV) for the use of the above-mentioned service. This is a legally required contract that ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.3. General Information and Mandatory Notices
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data includes data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission on the Internet (e.g., when communicating via email) may have security vulnerabilities. A complete protection of data from access by third parties is not possible.Notice on the Responsible Party
The responsible party for data processing on this website is: nacani GmbH Elkofener Weg 10 85567 Grafing/Schammach Phone: +49 (0)1715794465 Email: hi@nacani.de The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).Storage Duration
Unless a specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods). In the latter case, the data will be deleted after these reasons cease to apply.General Information on the Legal Basis of Data Processing on This Website
If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is also based on § 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for contract fulfillment or for pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. If your data is required to fulfill a legal obligation, it is processed based on Art. 6(1)(c) GDPR. Furthermore, data processing may be carried out based on our legitimate interest under Art. 6(1)(f) GDPR. The specific legal bases for each individual case are explained in the following sections of this privacy policy.Notice on Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other non-secure third countries under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We note that these countries may not guarantee a level of data protection comparable to that of the EU. For example, US companies are obligated to provide personal data to security authorities without allowing you as the affected party to take legal action. It cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent at any time. The legality of the data processing carried out before revocation remains unaffected.Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged infringement. This right to lodge a complaint exists without prejudice to other administrative or judicial remedies.Right to Data Portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a commonly used, machine-readable format, either for yourself or for a third party. If you request the direct transfer of this data to another controller, this will only be done if it is technically feasible.Access, Rectification, and Erasure
Within the framework of applicable legal provisions, you have the right to obtain free information at any time about your stored personal data, its origin, recipients, and the purpose of the data processing. You may also have a right to request the rectification or erasure of this data. For this purpose, as well as for any further questions regarding personal data, you can contact us at any time.Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:- If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.
- If you have objected to processing pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
SSL and TLS Encryption
For security reasons and to protect the transmission of confidential content—such as orders or inquiries that you send to us as the website operator—this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.Encrypted Payment Transactions on This Website
If, after concluding a paid contract, you are required to transmit your payment details (e.g., account number for direct debit authorization), this data is necessary for payment processing. Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar. When communication is encrypted, your payment data cannot be read by third parties.Objection to Promotional Emails
The use of contact details published as part of the legal notice obligation for sending unsolicited advertising and informational materials is hereby prohibited. The website operators expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.4. Data Collection on This Website
Cookies
Our website uses so-called “cookies.” Cookies are small data packets that do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored on your device (permanent cookies). Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your browser. Cookies can be set by us (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies enable the integration of specific services from third-party companies within websites (e.g., cookies for processing payment services). Cookies serve different purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes. Cookies necessary for carrying out electronic communication processes, providing certain functions requested by you (e.g., shopping cart function), or optimizing the website (e.g., measuring web traffic) are stored based on Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of its services. If consent for the storage of cookies and similar recognition technologies has been requested, processing is based solely on this consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG); consent can be revoked at any time. You can configure your browser to notify you when cookies are set and to allow cookies only in specific cases, to exclude cookies in general, or to enable the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted. You can find out which cookies and services are used on this website in this privacy policy.Consent with Borlabs Cookie
Our website uses the Borlabs Cookie consent technology to obtain your consent for storing certain cookies in your browser or for using certain technologies in a privacy-compliant manner. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as “Borlabs”). When you visit our website, a Borlabs cookie is stored in your browser, which saves the consents you have given or the withdrawal of such consents. This data is not shared with the provider of Borlabs Cookie. The collected data is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. For details on Borlabs Cookie’s data processing, please visit: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. The use of the Borlabs Cookie consent technology is based on the legal requirement to obtain consent for the use of cookies. The legal basis is Article 6(1)(c) GDPR.Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
Registration on This Website
You can register on this website to use additional functions. The data entered during registration is used solely for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full; otherwise, we will reject the registration. For important changes, such as changes in the scope of the offer or necessary technical modifications, we will use the email address provided during registration to inform you accordingly. The processing of data entered during registration is based on the necessity to fulfill the usage agreement established by registration and, if applicable, to initiate further contracts (Article 6(1)(b) GDPR). The data collected during registration is stored as long as you are registered on this website and will be deleted thereafter. Legal retention periods remain unaffected.5. Social Media
Instagram This website includes functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website. If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of this website, we do not receive knowledge of the content of the transmitted data or its use by Instagram. If consent has been obtained, the use of the aforementioned service is based on Art. 6(1)(a) GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent was obtained, the use of the service is based on our legitimate interest in achieving the broadest possible visibility in social media. If personal data is collected on our website with the help of the tool described here and transmitted to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The subsequent processing by Facebook or Instagram is not part of the joint responsibility. The obligations that we share have been outlined in an agreement on joint processing. The text of the agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tools and for implementing the tools on our website in a way that complies with data protection laws. Facebook is responsible for the security of Facebook and Instagram products. Data subject rights (e.g., access requests) regarding data processed by Facebook or Instagram can be exercised directly with Facebook. If you exercise data subject rights with us, we are obliged to forward them to Facebook. The data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here:- https://www.facebook.com/legal/EU_data_transfer_addendum
- https://help.instagram.com/519522125107875
- https://de-de.facebook.com/help/566994660333381
6. Analytics Tools and Advertising
Google Tag Manager We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves only to manage and deploy the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States. The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a quick and easy integration and management of various tools on its website. If the appropriate consent has been obtained, processing takes place exclusively based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by TTDSG. Consent can be revoked at any time. Google Analytics This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, dwell time, operating systems used, and the user’s origin. This data is assigned to the respective device of the website visitor using a user ID. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there. The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. The data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. IP Anonymization We have activated the IP anonymization function on this website. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyze your use of the website, compile reports on website activity, and provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Browser Plugin You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. More information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en. Demographic Data in Google Analytics This website uses the “demographic data” function of Google Analytics to display relevant advertisements within the Google advertising network. This allows reports to be generated that contain statements about the age, gender, and interests of website visitors. These data come from interest-based advertising from Google as well as visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.” Data Processing Agreement We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.Google Analytics E-Commerce Tracking
This website uses the “E-Commerce Tracking” feature of Google Analytics. With the help of E-Commerce Tracking, the website operator can analyze the purchasing behavior of website visitors to improve their online marketing campaigns. Information such as completed orders, average order values, shipping costs, and the time from viewing to purchasing a product is recorded. These data can be consolidated by Google under a transaction ID, which is assigned to the respective user or their device.Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). Additionally, targeted advertisements can be displayed based on the user data available on Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate these data by analyzing which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks. The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks https://privacy.google.com/businesses/controllerterms/mccs/Google Ads Remarketing
This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads Remarketing allows us to assign users who interact with our online offering to specific target groups, enabling us to show them interest-based advertising within the Google advertising network (remarketing or retargeting). Additionally, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device capabilities. This allows personalized, interest-based advertising messages that have been tailored to you based on your previous usage and browsing behavior on one device (e.g., smartphone) to also be displayed on another of your devices (e.g., tablet or PC). If you have a Google account, you can opt out of personalized advertising at the following link: https://www.google.com/settings/ads/onweb/ The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. Further information and Google’s privacy policy can be found at: https://policies.google.com/technologies/ads?hl=enAudience Targeting with Customer Match
For audience targeting, we also use Google Ads Remarketing’s Customer Match feature. In this process, we transmit certain customer data (e.g., email addresses) from our customer lists to Google. If the relevant customers are Google users and logged into their Google accounts, they will receive matching advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).7. Newsletter
Newsletter Data
If you would like to subscribe to the newsletter offered on this website, we require an email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No additional data is collected, or only on a voluntary basis. We use newsletter service providers for handling the newsletter, which are described below.Mailchimp
This website uses Mailchimp services for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Mailchimp is a service that organizes and analyzes newsletter distribution. If you enter data for newsletter subscription (e.g., email address), these are stored on Mailchimp servers in the USA. With Mailchimp, we can analyze our newsletter campaigns. When you open an email sent via Mailchimp, a file contained in the email (a so-called web beacon) connects to Mailchimp’s servers in the USA. This allows us to determine whether a newsletter message has been opened and which links were clicked. Additionally, technical information is collected (e.g., time of retrieval, IP address, browser type, and operating system). This information is not assigned to individual newsletter recipients and is used solely for statistical analysis of newsletter campaigns. The results of these analyses help tailor future newsletters to recipients’ interests. If you do not want your data to be analyzed by Mailchimp, you must unsubscribe from the newsletter. A corresponding unsubscribe link is provided in each newsletter email. The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing already carried out remains unaffected by the revocation. Data stored for newsletter subscription purposes will be kept until you unsubscribe from the newsletter and then deleted from our system and Mailchimp’s distribution list. Data stored for other purposes remain unaffected. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses After unsubscribing from the newsletter, your email address may be stored in a blacklist if necessary to prevent future mailings. The data from the blacklist is used solely for this purpose and is not merged with other data. This serves both your interest and ours in compliance with legal requirements for newsletter distribution (legitimate interest under Art. 6 para. 1 lit. f GDPR). The blacklist storage is indefinite. You can object to the storage if your interests outweigh our legitimate interest. More details can be found in Mailchimp’s privacy policy: https://mailchimp.com/legal/terms/Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) for the use of the aforementioned service. This legally required agreement ensures that Mailchimp processes the personal data of our website visitors only according to our instructions and in compliance with GDPR.8. Plugins and Tools
Google Maps
This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use Google Maps features, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The website provider has no control over this data transmission. When Google Maps is activated, Google may use Google Fonts to ensure consistent font display. When you access Google Maps, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. Google Maps is used in the interest of an appealing presentation of our online offerings and easy location of the places specified on our website. This represents a legitimate interest under Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out solely based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ More information on handling user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=enGoogle reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether data entry on this website (e.g., in a contact form) is carried out by a human or an automated program. reCAPTCHA analyzes website visitors’ behavior using various characteristics. The analysis starts automatically when the website visitor enters the site. reCAPTCHA evaluates various information (e.g., IP address, the time spent on the website, and user mouse movements). The collected data is forwarded to Google. The reCAPTCHA analyses run entirely in the background, and website visitors are not informed that such an analysis is taking place. The storage and analysis of data are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If consent has been requested, processing is carried out solely based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TTDSG. Consent can be revoked at any time. More information about Google reCAPTCHA can be found in Google’s privacy policy and terms of use: https://policies.google.com/privacy?hl=en https://policies.google.com/terms?hl=en9. Online Marketing and Affiliate Programs
Affiliate Programs on This Website
We participate in affiliate partner programs. In such programs, advertisements from a company (advertiser) are placed on websites of other companies within the affiliate partner network (publishers). When you click on one of these affiliate ads, you will be redirected to the advertised offer. If you subsequently complete a specific transaction (conversion), the publisher receives a commission. To calculate this commission, the affiliate network operator must be able to track which ad you clicked on and whether you completed the predefined transaction. For this purpose, cookies or similar recognition technologies (e.g., device fingerprinting) are used. The storage and analysis of data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the correct calculation of their affiliate commissions. If explicit consent is requested, data processing occurs solely based on Article 6(1)(a) GDPR and § 25(1) TTDSG, provided that consent includes the storage of cookies or access to user device information (e.g., device fingerprinting) as defined by TTDSG. Consent can be revoked at any time. We participate in the following affiliate programs: AdCell10. eCommerce and Payment Providers
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data to establish, define, and modify our contractual relationships. We only collect, process, and use personal data concerning the use of this website (usage data) when necessary to enable the user to utilize the service or for billing purposes. The legal basis for this is Article 6(1)(b) GDPR. The collected customer data will be deleted after the order is completed or the business relationship ends, provided there are no legal retention obligations. Legal retention periods remain unaffected.Data Transfer Upon Contract Conclusion for Online Shops, Merchants, and Shipping
If you order goods from us, we pass on your personal data to the transport company responsible for the delivery and to the payment service provider handling the transaction. Only the necessary data required by each service provider will be disclosed. The legal basis for this is Article 6(1)(b) GDPR, which allows the processing of data for contract fulfillment or pre-contractual measures. If you have given your consent under Article 6(1)(a) GDPR, we will pass on your email address to the shipping company so that they can inform you about the shipping status of your order. You can revoke your consent at any time.Payment Services
We integrate payment services from third-party providers on our website. When you make a purchase, your payment data (e.g., name, payment amount, account details, credit card number) is processed by the respective payment provider for transaction processing. These transactions are subject to the respective provider’s contractual and data protection policies. The use of payment service providers is based on Article 6(1)(b) GDPR (contract processing) and our interest in providing a smooth, convenient, and secure payment process (Article 6(1)(f) GDPR). If explicit consent is requested, the legal basis for data processing is Article 6(1)(a) GDPR. Consent can be revoked at any time. The following payment providers are used on this website:PayPal
Provider: PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg- EU Standard Contractual Clauses: PayPal Data Protection Policy
- Privacy Policy: PayPal Privacy Policy
Stripe
Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland- EU Standard Contractual Clauses: Stripe GDPR Compliance
- Privacy Policy: Stripe Privacy Policy
Klarna
Provider: Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden- Klarna Cookies Policy: Klarna Cookie Policy
- Privacy Policy: Klarna Privacy Policy
American Express
Provider: American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany- EU Binding Corporate Rules: American Express Data Protection
- Privacy Policy: American Express Privacy Policy
Mastercard
Provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium- EU Binding Corporate Rules: Mastercard Privacy Policy
- Global Privacy Notice: Mastercard BCRs
VISA
Provider: Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom- GDPR Compliance & EU Standard Contractual Clauses: VISA Privacy Policy
- Global Privacy Center: VISA Privacy Policy
11. Own Services
Handling of Applicant Data
We offer you the opportunity to apply for a job with us (e.g., via email, postal mail, or an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We ensure that data collection, processing, and use comply with applicable data protection laws and all other legal provisions and that your data is treated as strictly confidential.Scope and Purpose of Data Collection
When you submit an application, we process your related personal data (e.g., contact and communication details, application documents, notes from interviews, etc.), as necessary for deciding whether to establish an employment relationship. The legal basis for this is:- § 26 BDSG (under German law, initiation of an employment relationship)
- Article 6(1)(b) GDPR (general contract initiation)
- Article 6(1)(a) GDPR, if consent has been given (which can be revoked at any time)
