• 3.1 When you use our website for informational purposes only – that is, when you do not register or otherwise provide us with information – we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary to display our website to you and to ensure stability and security (the legal basis is Article 6 (1) sentence 1 lit. f GDPR):
  
  

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page) and access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates (referrer URL)
  • Browser type and version, Operating system and its interface, Language and version of the browser software
• 3.2 In addition to the data mentioned above, cookies are stored on your device when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They enable certain information to flow back to the entity that sets the cookie (in this case, to us). Cookies cannot execute programs or transmit viruses to your computer. They are used to make our online services more user-friendly and effective overall.
• 3.3 Use of Cookies
  a) Cookies
  
  Our websites use cookies and similar technologies. Cookies are small text files stored by your internet browser on the user’s device. A cookie typically contains a unique string of characters that allows the browser to be clearly identified when the website is accessed again.
  
  Cookies are used to make the website more user-friendly, to optimise the functions and services of the website, and to provide you with content tailored to your interests.
  
  The purpose of using technically necessary cookies is to enable and simplify the use of the website and the functions provided on it. Some features of this website cannot be offered without the use of cookies.
  
  The data collected through technically necessary cookies are not used to create user profiles.
  
  With your separate consent, additional cookies may be used to provide external media (for example, videos or maps) and for analysing website usage or enabling further functions.
  
  You can disable or restrict the use of cookies at any time by changing your internet browser settings. Already stored cookies can be deleted at any time; this can also be done automatically. If cookies are disabled for this website, some of its functions may no longer be available in full.
  
  The legal basis for processing personal data using technically necessary cookies is Article 6 (1) lit. f GDPR, whereby our legitimate interest lies in ensuring the secure, stable, and efficient provision of the website’s functions and the information available through it. If we fulfil a contractual obligation towards you through the respective function, the legal basis is Article 6 (1) lit. b GDPR.
  
  The legal basis for processing personal data using cookies for analytical or other non-essential purposes is, where applicable, the user’s consent pursuant to Article 6 (1) lit. a GDPR.

6. Newsletter and Email Distribution

• 6.1 With your consent, you can subscribe to our newsletter.
• 6.2 To register for our newsletter, we use the so-called double opt-in procedure. This means that, after you register, we send an email to the address you provided asking you to confirm that you wish to receive our newsletter. If you do not confirm your registration within 24 hours, your information will be locked and automatically deleted after one month. We also store the IP addresses you used as well as the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.
• 6.3 The only mandatory information required for sending the newsletter is your email address. The provision of any other data, marked separately, is voluntary and will be used solely to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis for this is Article 6 (1) sentence 1 lit. a GDPR.
• 6.4 You can withdraw your consent to receive the newsletter at any time and unsubscribe. You may declare your withdrawal by clicking the link provided in every newsletter email or by contacting us using the details provided in the imprint (legal notice).
• 6.5 Please note that when sending the newsletter, we evaluate your user behaviour. For this purpose, the emails we send contain so-called web beacons or tracking pixels — one-pixel image files stored on our website. For these analyses, we link the data mentioned in Section 3 and the web beacons to your email address and an individual ID. Links contained in the newsletter also include this ID. The data obtained in this way allow us to create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on, and use this information to infer your personal interests. These data are also linked to actions you have taken on our website.
  
  You may object to this tracking at any time by clicking the separate link provided in each email or by contacting us through another communication channel. The information is stored as long as you remain subscribed to the newsletter. After you unsubscribe, the data are stored only in an aggregated and anonymised form for statistical purposes. Such tracking is also not possible if you have disabled the automatic display of images in your email program. In this case, the newsletter will not be fully displayed and you may not be able to use all its features. If you manually display the images, the tracking described above will occur.
  
  The storage of cookies and tracking data takes place on the basis of Article 6 (1) lit. a GDPR in conjunction with your consent.
  
  These data are linked with your Mailchimp account operated by The Rocket Science Group LLC, 675 Ponce de Leon Ave. NE, Suite 5000, Atlanta, GA 30308, USA, insofar as you have registered for our newsletter and/or created a customer account with us.

7. Web Analytics

• 7.1 For the purpose of designing and optimising this website in line with user needs, data are collected and stored using solutions and technologies provided by our partner Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. From these data, user profiles are created under the use of pseudonyms. These data are not merged with information about the bearer of the pseudonym. When using these technologies, cookies are stored locally on the user’s device. Visitors to this website may object to this collection and storage of data at any time with future effect.
  
  The processing of your data is based on your consent in accordance with Article 6 (1) (a) GDPR. You may withdraw this consent at any time with effect for the future.
  
  Further information on data protection by Google Ireland Ltd. can be found in Google’s privacy policy at: https://www.google.de/contact/impressum.html
  
  This website also uses the web analytics service Cloudflare, Country Hall, The Riverside Building, Belvedere Road, London SE1 7PB, Great Britain. Only anonymised usage data are collected, aggregated, stored, and converted into usage profiles using pseudonyms. The legal basis for this processing is Article 6 (1) sentence 1 (a) GDPR in conjunction with your consent.

8. Interest-Based Advertising Content

• 8.1 We use Google Ads (formerly Google AdWords), a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”). Google Ads enables us to draw attention to our attractive offers on external websites through advertising materials and to measure the success of individual advertising campaigns. These advertisements are delivered by Google via so-called ad servers. For this purpose, we use ad-server cookies that can measure certain performance parameters, such as the display of ads or user clicks. When you access our website via a Google advertisement, a cookie from Google Ads is stored on your device. These cookies generally expire after 30 days and are not intended to personally identify you. The cookie usually stores the following analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted). These cookies allow Google to recognise your web browser. If a user visits certain pages of an Ads customer’s website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to the relevant page. Each Ads customer receives a different cookie; cookies therefore cannot be tracked across the websites of different Ads customers. We ourselves do not collect or process any personal data in connection with these advertising measures. We only receive statistical evaluations from Google, which allow us to identify which of our advertising measures are particularly effective. We do not obtain any further data from the use of these advertising tools, and we cannot identify users based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s servers. We have no influence over the scope or further use of the data collected by Google Ads. According to our knowledge, Google receives information that you have accessed the relevant part of our website or clicked on an advertisement of ours. If you have a Google account and are logged in, Google may associate the visit with your account. Even if you are not registered or logged in with Google, it is possible that Google determines and stores your IP address.
  
  We use Google Ads for marketing and optimisation purposes—particularly to display advertisements that are relevant and interesting to you, to improve campaign performance reports, and to ensure fair calculation of advertising costs. This constitutes our legitimate interest within the meaning of Article 6 (1) sentence 1 lit. f GDPR.
  
  You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your browser settings. However, in this case, you may not be able to use all functions of our website to their full extent. You can also configure your browser to block cookies from the domain “www.googleadservices.com” (https://www.google.de/settings/ads). Please note that this setting will be deleted if you remove your cookies. You can further deactivate interest-based advertising via http://optout.aboutads.info. Again, this setting will be deleted if you delete your cookies.
  
  Third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland
  
  Further information on Google’s use of data, settings and opt-out options, as well as data protection, can be found on the following Google web pages:
  
  Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
  Google Website Statistics: https://services.google.com/sitestats/de.html
  
  
• 8.2 We also use Google Dynamic Remarketing, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”). Google Dynamic Remarketing enables us to display our advertisements to you during your continued use of the internet after visiting our website. This is achieved through cookies stored in your browser, which allow Google to record and analyse your browsing behaviour across different websites. Google can thereby identify that you previously visited our website. According to Google, no personal data collected during remarketing are merged with other personal data possibly stored by Google. Google states that pseudonymisation is applied within the remarketing process.
  
  We use Google Dynamic Remarketing for marketing and optimisation purposes, particularly to display advertisements that are relevant and interesting to you, to improve campaign performance reports, and to ensure fair billing of advertising costs. This constitutes our legitimate interest under Article 6 (1) sentence 1 lit. f GDPR.
  
  You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your browser settings. You can also block cookies from the domain “www.googleadservices.com” (https://www.google.de/settings/ads) or deactivate interest-based advertising via http://optout.aboutads.infodeaktivieren. Please note that these settings will also be removed when you delete your cookies.
  
  Third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland
  
  Further information on Google’s use of data, settings and opt-out options, as well as data protection, can be found on the following Google web pages:
  
  Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
  Google Website Statistics: https://services.google.com/sitestats/de.html
  
• 8.3 This website uses the visitor action pixel (Facebook Pixel) for conversion measurement, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data may also be transferred to the USA and other third countries.
  
  SThis enables us to track the behaviour of website visitors after they have clicked on a Facebook advertisement and been redirected to our website.
  
  The purpose is to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimise future advertising activities. The data collected are anonymous to us as the operator of this website—we cannot draw any conclusions about the identity of the users. However, Facebook stores and processes the data in such a way that a connection to the respective user profile is possible. Facebook may use these data for its own advertising purposes in accordance with the Facebook Data Policy, allowing Facebook to display advertisements on Facebook and on external sites. We as website operators have no control over this use of data.
  
  The use of Facebook Pixel is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including through social media. Where corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Article 6 (1) lit. a GDPR; consent may be withdrawn at any time.
  
  Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses (SCCs). Details can be found here:
  
  https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
  
  You can also disable the “Custom Audiences” remarketing feature in your Facebook ad settings: https://de-de.facebook.com/about/privacy/.
  
  You can also disable the “Custom Audiences” remarketing feature in your Facebook ad settings: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (You must be logged in to Facebook.)
  
  If you do not have a Facebook account, you can disable interest-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

9. Social Media / Social Media Plugins

• 9.1 This website uses plugins from various social media platforms (e.g. Facebook, Twitter, Instagram).
  
  You can generally recognise the plugins by the respective social media logos. To ensure the protection of your privacy on this website, we use these plugins only in conjunction with the so-called “Shariff” solution. This application prevents the plugins integrated on this website from transmitting data to the respective provider as soon as you first access the page.
  
  A direct connection to the provider’s server is established only when you activate the respective plugin by clicking on the corresponding button (consent). Once you activate a plugin, the respective provider receives information that your browser has accessed our website from your IP address. If you are simultaneously logged into your corresponding social media account (e.g. Facebook), the provider can associate your visit to our website with your user account.
  
  Activating the plugin constitutes consent within the meaning of Article 6 (1) lit. a GDPR. You may withdraw this consent at any time with effect for the future.
  
  Instagram Plugin
  
  Functions of the Instagram service are integrated into this website. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  
  If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to this website with your user account. Please note that, as the operator of this website, we have no knowledge of the content of the transmitted data or of its use by Instagram.
  
  The storage and analysis of data are based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in achieving the broadest possible visibility on social media platforms. Where explicit consent has been requested, processing takes place exclusively on the basis of Article 6 (1) lit. a GDPR; consent may be withdrawn at any time.
  
  Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses (SCCs). Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum,https://help.instagram.com/519522125107875
  and https://de-de.facebook.com/help/566994660333381. Further information can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

10. Payment Methods

• The legal basis for processing payments is Article 6 (1) sentence 1 lit. b GDPR, and, where your consent is required, Article 6 (1) lit. a GDPR.
• 10.1 PayPal
  The controller responsible for processing has integrated components of PayPal into this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards for users who do not have a PayPal account. A PayPal account is managed via an email address, meaning it does not have a traditional account number. PayPal enables online payments to third parties as well as the receipt of payments. Furthermore, PayPal performs trustee functions and offers buyer protection services.
  
  The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
  
  If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, personal data of the data subject are automatically transmitted to PayPal. By choosing this payment option, the data subject consents to the transmission of the personal data required for payment processing.
  
  The personal data transmitted to PayPal usually include first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order are also necessary for the execution of the purchase contract.
  
  The transmission of data is intended for payment processing and fraud prevention. The controller will, in particular, transfer personal data to PayPal if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit agencies. This transmission is intended for identity and creditworthiness checks.
  
  PayPal may pass on personal data to affiliated companies, service providers, or subcontractors, insofar as this is necessary to fulfil contractual obligations or if the data are to be processed on behalf of PayPal.
  
  The data subject has the option to revoke their consent to the processing of personal data at any time with effect for the future. Such a revocation does not affect personal data that must necessarily be processed, used, or transmitted for (contractually compliant) payment processing. PayPal’s applicable privacy policy can be accessed at: http://www.paypal.com/de/webapps/mpp/ua/privacy-full
• 10.2 Sofortüberweisung (Instant Bank Transfer)
  We also offer payment by means of “Sofortüberweisung” (instant bank transfer) on our website. The provider of this payment service is Multipayment, Waisenhausstrasse 74, 46117 Oberhausen, Germany.
  
  With the “Sofortüberweisung” procedure, we receive a real-time payment confirmation from Multipayment, allowing us to immediately begin fulfilling our obligations.
  
  f you choose “Sofortüberweisung” as your payment method, you transmit your PIN and a valid TAN to Multipayment, which then logs into your online banking account. After logging in, Multipayment automatically verifies your account balance and carries out the transfer to us using the TAN you provided. Multipayment then immediately sends us a transaction confirmation. In addition, after logging in, your transaction history, credit line, and the existence of other accounts and their balances are automatically checked.
  
  In addition to the PIN and TAN, the payment data you entered, as well as your personal data, are transmitted to Multipayment. The personal data transmitted typically include your first and last name, address, telephone number(s), email address, IP address, and any other data necessary for payment processing. The transmission of this data is required to clearly identify you and to prevent fraud attempts.
  
  Your data are transmitted to Multipayment on the basis of Article 6 (1) lit. a GDPR (consent) and Article 6 (1) lit. b GDPR (processing for contract performance). You have the right to withdraw your consent at any time. A withdrawal does not affect the legality of processing carried out before the withdrawal.
  
  Further details regarding payments via Sofortüberweisung can be found here: https://multipayment.de/contact
  
• 10.3 Credit Card Payment via Multipayment
  If you choose a payment method offered by the payment service provider Multipayment, the payment will be processed through Multipayment, to whom we transmit the information you provided during the ordering process, along with details of your order, in accordance with Article 6 (1) lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Multipayment and only to the extent necessary for this purpose.

11. Linked Content / Sharing Functions

• Our website contains links to our profiles on social networks as well as options to share content from our website via social networks. No personal data is collected in connection with the provision of these functions until you use the respective feature after logging in to the relevant provider. The respective privacy policies and data protection notices of the individual platform operators apply. Please note that we are not responsible for the data processing practices of third-party platforms that are outside our sphere of influence.