Privacy Policy | GGM Gastro

Privacy Policy

Privacy Statement

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all the data that can identify you personally. Detailed information on data protection can be found in our Privacy Statement below.

Data collection on this website

Who is responsible for collecting data on this website?

The data processing on this website shall be carried out by the operator of the site. Contact information is provided in the "Remark for the Controller" section of this Privacy Statement.

How do we collect your data?

On the one hand, your data is collected when you give it to us. This may be, for example, data that you enter in a contact form.

Other data are collected automatically, or after your consent, by our computer systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or page viewing time). This data is collected automatically as soon as you access this website.

What do we use your data for?

Part of the data is collected in order to ensure that the website operates smoothly. Other data can be used to analyze your user behavior. Where contracts can be concluded or prepared via the website, the data transmitted shall also be processed for contractual offers, orders or other requests for services.

What are your rights regarding your data?

You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can withdraw it at any time for the future. You also have the right, in certain circumstances, to request the limitation of the processing of your personal data. You also have a right to complain to the competent supervisory authority.

For this, as well as for any other data protection questions, you can contact us at any time.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with existing data protection legislation and this Privacy Statement.

When you use this website, different personal data are collected. Personal data is data that allows you to identify yourself personally. This Privacy Statement explains what data we collect and what we use it to. It also explains how and for what purposes this is done.

We draw your attention to the fact that the transmission of data over the Internet (e.g., when communicating via e-mail) may have security deficiencies. Full data protection against third-party access is not possible.

Note concerning the controller

The data controller on this website is:

GGM Gastro International GmbH

Managers: Ferit Inan & Ömer Elma
Weinerpark 16
D - 48607 Ochtrup

Tel: Tel: +49 (0) 2553 Fax: +49 (0) 2553 - 72 20 20 - 200
E-mail: info@ggmgastro.com

The controller is the natural or legal person who, alone or in conjunction with others, decides on the purposes and means of processing personal data (e.g., personal data). names, e-mail addresses, etc.).

Shelf life

Unless a more specific retention period is indicated in this Privacy Statement, your personal data will remain with us until the purpose of processing the data disappears. If you submit a legitimate request for deletion or withdraw your consent to the processing of data, your data will be deleted, unless we have other legally permissible grounds for keeping your personal data (e.g. tax or commercial retention periods); in the latter case, the deletion shall take place after those grounds have been removed.

General comments on the legal basis of data processing on this website

If you have consented to the processing of data, we will process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9, paragraph 2(a) of the GDPR, where particular categories of data within the meaning of Art. 9, para. 1 of the GDPR are dealt with. In the event of explicit consent to the transfer of personal data to third countries, the processing of the data shall also take place on the basis of Art. 49, paragraph 1(a) of the GDPR. If you have consented to the storage of cookies or access to information about your terminal (e.g. via the device fingerprinting), the processing of the data shall also take place on the basis of § 25 (1) TDDDG. Consent may be withdrawn at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of art. 6, paragraph 1(b) of the GDPR. We also process your data when it is necessary to comply with a legal obligation, on the basis of art. 6, paragraph 1(c) of the GDPR. Data processing may also take place on the basis of our legitimate interest in accordance with Art. 6, paragraph 1 (f) of the GDPR. The legal bases applicable in each particular case are specified in the following paragraphs of this Privacy Statement.

Data Protection Officer

We have appointed a Data Protection Officer.

Philipp Gumpert
https://gataca.de/

GATACA GmbH
Am Riettor 4
78048 Villingen-Schwenningen

datenschutz@ggmgastro.com

Note on the transfer of data to data-impaired third countries as well as to uncertified US companies DPF

In particular, we use data protection tools from companies established in non-EU countries, as well as US tools whose suppliers are not certified according to the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data can be transferred to and processed in these countries. We would like to draw your attention to the fact that, in data protection-impaired third countries, a level of data protection comparable to that of the EU cannot be guaranteed.

We draw your attention to the fact that the United States, as a safe third country, has in principle a level of data protection comparable to that of the EU. A data transfer to the United States is therefore permitted when the recipient is certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including recipients of data, can be found in this Privacy Statement.

Recipients of personal data

As part of our business, we work with various external organizations. On this occasion, the transmission of personal data to these external bodies is sometimes necessary. We only transmit personal data to external bodies if this is necessary for the performance of a contract, if we are legally required to do so (e.g., transmission of data to tax authorities), if we have a legitimate interest in the transmission in accordance with s. 6, paragraph 1 (f) of the GDPR or if another legal basis permits the transmission of data. In case of recourse to subcontractors, we only transmit the personal data of our customers on the basis of a valid subcontract. In case of joint treatment, a joint treatment contract is concluded.

Withdrawal of your consent to data processing

Many data processing is only possible with your explicit consent. You may withdraw consent at any time. The legality of the processing of data up to the date of withdrawal is not affected by the withdrawal.

Right to object to data collection in particular cases and to direct prospecting (Art. 21 GDPR)

If the processing of the data is based on Art. 6, para. 1, point (e) or (f) of the GDPR, you have the right to opt for the processing of your personal data for reasons of your particular situation; IT IS ALSO APPLICABLE TO PROFILAGE BASED ON THESE PROVISIONS. YOU WILL FIND THE LEGAL BASIS ON WHICH A TREATMENT IS MADE IN THIS DECLARATION OF CONFIDENTIALITY. If you agree, we will no longer treat your personal data in a way that is consistent with your interests, rights and freedoms, or if the processing is based on the determination, exercise or defence of rights in justice (OPPOSITION under Art. 21, para.

IF YOUR PERSONAL DATA IS TREATED FOR DIRECT PROSPECTION, YOU HAVE THE RIGHT TO PROSPECT YOUR PERSONAL DATA WITH REGARD TO THOSE PROSPECTIONS; IT IS ALSO APPLICABLE TO PROFILING IN THE MEASUREMENT IN WHICH IT IS RELATED TO THIS DIRECT PROSPECTION. IF YOU APPLY, YOUR PERSONAL DATA WILL NOT BE USED MORE FOR DIRECT PROSPECTION (OPPOSITION UNDER ARTICLE 21(2) GDPR).

Right to complain to the competent supervisory authority

In the event of violations of the GDPR, the persons concerned shall have a right of complaint to a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of alleged infringement. The right of claim shall be exercised without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have the data we process automatedly on the basis of your consent or in execution of a contract delivered to yourself or to a third party in a standard machine-readable format. If you request the direct transfer of data to another controller, this will only take place to the extent technically feasible.

Access, rectification and deletion

Under the applicable legal provisions, you have the right at any time to obtain free information about your registered personal data, their origin and recipients, as well as about the purpose of processing the data and, where appropriate, a right to rectification or deletion of such data. For this, as well as for any other personal data questions, you can contact us at any time.

Right to limitation of treatment

You have the right to request the limitation of the processing of your personal data. For this, you can contact us at any time. The right to limitation of treatment exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify it. During the period of verification, you have the right to request the limitation of the processing of your personal data.
If the processing of your personal data has been or is being carried out illegally, you may request that the processing of the data be restricted instead of being deleted.
If we no longer need your personal data, but you need it for the exercise, defence or enforcement of rights in court, you have the right to request the limitation of the processing of your personal data instead of its deletion.
If you have filed an objection under s. 21, para. 1 of the GDPR, a balance must be struck between your interests and our interests. Until it is established which interests prevail, you have the right to request the limitation of the processing of your personal data.

If you have limited the processing of your personal data, such data – apart from their retention – may only be processed with your consent or for the purpose of establishing, exercising or defending rights in court or for the protection of the rights of another natural or legal person or for important reasons in the public interest of the European Union or of a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send us as the site operator, this site uses SSL or TLS encryption. You recognize an encrypted connection to the fact that the browser address bar changes from "http://" to "https://" and to the presence of the lock symbol in the browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted payments on this website

If, after the conclusion of a paid contract, there is an obligation to provide us with your payment data (e.g., account number in the case of a debit authorization), this data is necessary to process the payment.

Payments made by the current means of payment (Visa/MasterCard, levy) are made exclusively via an encrypted SSL or TLS connection. You recognize an encrypted connection to the fact that the browser address bar changes from "http://" to "https://" and to the presence of the lock symbol in the browser bar.

In case of encrypted communication, the payment data you send us cannot be read by third parties.

Opposition to advertising e-mails

We hereby oppose the use of the contact information published in the context of the obligation to provide legal notice for the sending of advertising and information material not expressly requested. Page operators expressly reserve the right to institute legal proceedings in the event of unsolicited sending of advertising information, e.g. by spam.

3. Data collection on this website

Cookies

Our web pages use so-called cookies. Cookies are small data packages and cause no damage to your terminal. They are stored on your terminal either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you remove them yourself or your web browser automatically deletes them.

Cookies may come from us (owner cookies) or third-party companies (so-called third-party cookies). Third-party cookies allow the integration of certain third-party business services into websites (e.g., cookies for processing payment services).

Cookies perform different functions. Many cookies are technically necessary, as some of the website's functions would not work without them (e.g., basket or video display). Other cookies can be used to analyze user behaviour or for advertising purposes.

Cookies necessary for the electronic communication process, the provision of certain functions you wish (e.g. for the shopping cart function) or the optimization of the website (e.g. audience measurement cookies) (necessary cookies) are stored on the basis of art. 6, paragraph 1 (f) of the GDPR, unless otherwise specified. The website operator has a legitimate interest in storing cookies necessary to provide its services in a technically impeccable and optimized manner. Where consent to the storage of cookies and comparable recognition technologies has been requested, the processing shall take place exclusively on the basis of such consent (Article 6(1)(a) GDPR and Article 25(1)(TDDDG); consent may be withdrawn at any time.

You can configure your browser so that you are informed about the placement of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies in certain cases or generally, and enable automatic removal of cookies when the browser closes. If cookies are deactivated, the functionality of this website may be limited.

This Privacy Statement contains the cookies and services used on this website.

CookieFirst

Our website uses CookieFirst to obtain your consent to the storage of certain cookies on your device or the use of certain technologies and to document them in accordance with data protection. The provider of this technology is Digital Data Solutions B.V. (CookieFirst), Planting Middenlaan 42A, 1018 DH Amsterdam, Netherlands (hereinafter "CookieFirst").

When you access our website, a connection is established with CookieFirst servers to collect your consents and other statements regarding the use of cookies. CookieFirst then saves a cookie in your browser so that you can associate the consents given or their withdrawal. The IP address (anonymized), the browser and operating system user agent and the URL from which the consent was given are processed and integrated into CookieFirst. The data collected in this way is kept until you ask us to delete them, either you remove the CookieFirst cookie yourself, or the purpose of storing the data disappears. The legal obligations of mandatory retention remain unchanged.

CookieFirst transmits personal data to third-party providers. These include a CDN in Slovenia, an IP geolocation service in Romania and accommodation at OVH in Germany and France. CookieFirst has its head office in Amsterdam, the Netherlands.

CookieFirst is used to obtain the consents legally required for the use of cookies. The legal basis is art. 6, paragraph 1, sentence 1, point (c) of the GDPR.

Subcontracting

We have entered into a subcontract (AVV) for the use of the above mentioned service. This is a contract imposed by data protection legislation, which ensures that the provider only processes the personal data of visitors to our website in accordance with our instructions and in compliance with the GDPR.

Server log files

The page provider automatically collects and stores information in what is called server log files, which your browser automatically transmits to us. These are:

Type and version of browser
Operating system used
URL of provenance (see)
Host name of the computer accessing the site
Time of request to server
IP address

These data are not merged with other data sources.

The collection of such data is carried out on the basis of Art. 6, paragraph 1 (f) of the GDPR. The website operator has a legitimate interest in technically impeccable display and optimization of its website – for this, server log files must be collected.

Contact form

If you send us requests via the contact form, your data from the application form, including the contact details indicated therein, are stored with us for the purpose of processing the application and for possible additional questions. We do not transmit this data without your consent.

The processing of this data is carried out on the basis of Art. 6, paragraph 1, point (b) of the GDPR, where your application is related to the performance of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if requested; consent may be withdrawn at any time.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose of storing the data disappears (e.g. after the complete processing of your request). The mandatory legal provisions – in particular the retention periods – remain unchanged.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including any personal data (name, request), is registered and processed with us for the purpose of processing your request. We do not transmit this data without your consent.

The data you have transmitted to us through contact requests remain with us until you ask us to delete it, withdraw your consent to storage, or disappear the purpose of storing the data (e.g. after the complete processing of your request). The mandatory legal provisions – in particular the statutory retention periods – remain unchanged.

Communication via WhatsApp

For communication with our customers and other third parties, we use the WhatsApp instant messaging service. The supplier is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication is done by end-to-end encryption (pair à pair), which prevents WhatsApp or other third parties from accessing the content of the communication. WhatsApp, however, has access to metadata generated during the communication process (e.g. sender, recipient and time). We also draw your attention to the fact that, according to its own statements, WhatsApp shares the personal data of its users with its US-based parent company Meta. Further information on data processing can be found in WhatsApp's privacy policy at:https://www.whatsapp.com/legal/#privacy-policy.

WhatsApp is used on the basis of our legitimate interest in as fast and effective a communication as possible with customers, prospects and other commercial and contractual partners (Article 6(1)(f) GDPR). Where corresponding consent has been requested, data processing shall take place exclusively on the basis of such consent; it may be withdrawn at any time with effect for the future.

The communication content exchanged between you and us on WhatsApp remains with us until you ask us to delete it, withdraw your consent to storage, or that the purpose of storing the data disappears (e.g. after the complete processing of your request). The mandatory legal provisions – in particular the retention periods – remain unchanged.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards during data processing in the United States. Any DPF certified company undertakes to comply with these data protection standards. Further information on this subject can be obtained from the supplier via the following link:https://www.dataprivacyframework.gov/participant/7735.

We use WhatsApp in its "WhatsApp Business" variant.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts so that no automatic synchronization of data with the address book of the smartphones used takes place.

We entered into a subcontract with the supplier mentioned above.

Registration on this website

You can register on this website to use additional features of the site. We use the data entered for this purpose only for the use of the offer or service for which you have registered. The mandatory information requested at the time of registration must be provided in full. Otherwise, we will refuse registration.

For major changes, such as the scope of the offer, or the technical changes required, we use the e-mail address indicated at the time of registration to inform you.

The processing of the data entered during registration shall be carried out for the purpose of carrying out the use relationship based on registration and, where appropriate, the preparation of other contracts (Article 6(1)(b) GDPR).

The data collected during registration are retained by us as long as you are registered on this website and then deleted. The legal retention periods remain unchanged.

Registration with Facebook Connect

Instead of registering directly on this website, you can register with Facebook Connect. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the data collected is also transferred to the US and other third countries.

If you choose to register with Facebook Connect and click on the " Login with Facebook" / "Connect with Facebook" button, you are automatically redirected to the Facebook platform. You can connect with your usage data. Your Facebook profile is linked to this website or to our services. Thanks to this link, we have access to the data you have registered with Facebook. These include:

Facebook Name
Facebook profile and coverage photo
Facebook cover photo
Email address registered with Facebook
Facebook ID
Lists of Facebook Friends
Facebook Likes
Date of birth
Gender
Country
Language

This data is used to create, supply and customize your account.

Registration with Facebook Connect and related data processing operations are based on your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future.

To the extent that personal data are collected on our website using the tool described here and transmitted to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to data collection and transmission to Facebook. Facebook processing after transmission is not a joint responsibility. The joint obligations have been recorded in a joint treatment agreement. The text of the agreement can be found at:https://www.facebook.com/legal/controller addendum. According to this agreement, we are responsible for the communication of data protection information when using the Facebook tool and the implementation of the tool on our website in a secure way with regard to data protection. Facebook is responsible for the data security of Facebook products. You can exercise the rights of the data subject (e.g. access requests) relating to data processed by Facebook directly from Facebook. If you exercise the rights of those concerned with us, we are required to forward them to Facebook.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://www.facebook.com/legal/EU data transfer addendum,https://de-de.facebook.com/help/566994660333381andhttps://www.facebook.com/policy.php.

More information can be found in Facebook's Terms of Use and Facebook's Privacy Policy. These are available at:https://de-de.facebook.com/about/privacy/andhttps://de-de.facebook.com/legal/terms/.

Registration with Google

Instead of registering directly on this website, you can register with Google. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To register with Google, you only need to enter your Google name and password. Google will identify you and confirm your identity on our website.

When you log in with Google, we may use some of your account information to complete your profile with us. You decide whether and which of this information is relevant to your Google security settings, which you will find here:https://myaccount.google.com/securityandhttps://myaccount.google.com/permissions.

The processing of data related to Google registration is based on our legitimate interest in providing our users with as simple a registration process as possible (Art. 6, para. 1 (f) GDPR). As the use of the registration function is optional and users may decide on the corresponding access possibilities themselves, there are no overriding rights of the persons concerned to object.

4. Social networks

Pinterest

On this website we use elements of the Pinterest social network, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

When you access a page containing such an item, your browser establishes a direct connection with Pinterest servers. This social network element then transmits log data to the Pinterest server in the United States. These log data may contain your IP address, the address of the websites visited which also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

The use of this service is based on your consent in accordance with s. 6, paragraph 1 (a) of the GDPR and § 25 (1) TDDDG. Consent may be withdrawn at any time.

Further information on the purpose, scope, subsequent processing and use of data by Pinterest, as well as on your privacy rights and possibilities, can be found in Pinterest's data protection information:https://policy.pinterest.com/de/privacy-policy.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the Google Analytics web analytics service. The supplier is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyze the behaviour of site visitors. The website operator thus obtains different user data, such as the pages consulted, the duration of the visit, the operating systems used and the origin of the user. This data is grouped into a user ID and associated with the visitor terminal of the site concerned.

Google Analytics also allows us to record your mouse and scroll movements and clicks. In addition, Google Analytics uses different modelling approaches to complement the data sets collected and uses machine learning technologies in data analysis.

Google Analytics uses technologies for user recognition for behavioral analysis (e.g. cookies or "device fingerprinting"). The information collected by Google on the use of this website is usually transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent in accordance with s. 6, paragraph 1 (a) of the GDPR and § 25 (1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://privacy.google.com/business/controllerterms/mccs/.

IP address anonymous

Google Analytics IP address anonymization is enabled. As a result, your IP address is truncated by Google within the Member States of the European Union or in other States Parties to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the complete IP address transmitted to and truncated with a Google server in the United States. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to report on the activities of the website and to provide the operator of the website with other services related to the use of the website and the Internet. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Browser extension module

You can prevent the collection and processing of your data by Google by downloading and installing the browser extension module available via the following link:https://tools.google.com/dlpage/gaoptout?hl=de.

More information on Google Analytics' processing of user data can be found in Google's Privacy Statement:https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals

We use Google signals. When you visit our website, Google Analytics collects your location, research history and YouTube history, as well as demographic data (visitor data). This data can be used for personalized advertising using Google signals. If you have a Google account, the data of visitors from Google signals are associated with your Google account and used for personalized advertising messages. These data are also used to compile anonymised statistics on the behaviour of our users.

Subcontracting

We have a subcontract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics e-commerce measurement

This website uses Google Analytics' "Measuring Electronic Commerce" function. Through the measurement of e-commerce, the website operator can analyze the purchasing behaviour of visitors to the site in order to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time elapsed between consultation and purchase of a product are then collected. This data can be grouped by Google under a transaction ID associated with the user or his terminal.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to broadcast advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keywords). In addition, targeted ads may be posted based on user data available from Google (e.g. location data and interests) (audience target). As a website operator, we can evaluate this data quantitatively, for example by analyzing which search terms have led to the dissemination of our ads and how many ads have generated corresponding clicks.

The use of this service is based on your consent in accordance with s. 6, paragraph 1 (a) of the GDPR and § 25 (1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://policies.google.com/privacy/frameworksandhttps://business.safety.google/controllerterms/.

Google Conversion Tracking

This website uses Google conversion tracking. The supplier is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google's conversion tracking, we and Google can detect if the user has done some actions. For example, we can evaluate on which buttons on our website it has been clicked and how often, and which products have been especially often viewed or purchased. This information is used to compile conversion statistics. We know the total number of users who clicked on our ads and the actions they did. We do not receive any information to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

The use of this service is based on your consent in accordance with s. 6, paragraph 1 (a) of the GDPR and § 25 (1) TDDDG. Consent may be withdrawn at any time.

More information on Google's conversion tracking can be found in Google's privacy policy:https://policies.google.com/privacy?hl=de.

6. Newsletter

If you order goods or services from us and indicate your e-mail address on this occasion, this e-mail address can then be used by us to send newsletters, provided that we have informed you beforehand. In this case, the newsletter is only used for direct prospecting for our own similar goods or services. You can unsubscribe from this newsletter at any time. For this purpose, a corresponding link is included in each newsletter. The legal basis for sending the newsletter is, in this case, art. 6, para. 1, point (f) of the GDPR in conjunction with § 7, para. 3 UWG. Of course, we have already clearly informed you, when collecting your e-mail address as well as each subsequent use, that you can object to this sending at any time. This does not result in any cost to you other than transmission costs at the basic rate.

For sending, we use the SAP Emarsys email marketing platform, a service from SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf. The processing of the data is carried out on our behalf on the basis of a subcontract in accordance with Art. 28 GDPR. Processing takes place exclusively on servers within the EU. A transfer to third countries shall take place only if appropriate guarantees within the meaning of Articles 44 et seq. of the GDPR exist.

You can object at any time, with effect for the future, to the sending of our newsletters for existing customers. To do this, simply use the unsubscribe link at the end of each e-mail or contact us via the contact details indicated in the legal notices.

After you withdraw from the newsletter mailing list, your e-mail address is, if necessary, registered with us in a blacklist to prevent future mailings to you. The blacklist data is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Registration on the blacklist is not limited in time. You may object to this registration if your interests outweigh our legitimate interest.

7. Electronic commerce and payment providers

Processing of customer and contractual data

We collect, process and use personal customer and contractual data for the establishment, definition of content and modification of our contractual relationships. We collect, process and use personal data relating to the use of this website (use data) only to the extent necessary to enable the user to use the service or to invoice it. The legal basis is art. 6, paragraph 1(b) of the GDPR.

The customer data collected shall be deleted after the order has been executed or the commercial relationship has been terminated and after any legal retention periods have expired. The legal retention periods remain unchanged.

Data transmission when entering into a contract for online shops, resellers and shipment of goods

If you order goods from us, we send your personal data to the shipping company responsible for delivery and to the payment service provider responsible for processing payments. Only the data required by the provider concerned to fulfil his or her mission shall be transmitted. The legal basis is art. 6, paragraph 1(b) of the GDPR, which authorizes the processing of data for the performance of a contract or pre-contractual measures. If you have given consent in accordance with s. 6, paragraph 1 (a) of the GDPR, we will send your e-mail address to the shipping company responsible for delivery so that it can inform you by e-mail of the shipping status of your order; you may withdraw this consent at any time.

Payment services

We integrate third-party payment services on our website. When you make a purchase with us, your payment data (e.g. name, payment amount, bank details, credit card number) are processed by the payment service provider for the purpose of processing the payment. For such transactions, the contractual conditions and data protection provisions of each supplier shall apply. The use of payment service providers is based on s. 6, paragraph 1 (b) of the GDPR (performance of the contract) and the interest in a payment process as smooth, comfortable and secure as possible (Article 6(1)(f) GDPR). To the extent that your consent is required for certain actions, s. 6, paragraph 1(a) of the GDPR provides the legal basis for data processing; consents may be withdrawn at any time for the future.

We use the following payment services / payment service providers as part of this website:

Payments bycredit card

Supplier:

"VR-Pay» by Card-Process-GmbH

CardProcess GmbH
Wachhausstraße 4
76127 Karlsruhe

The legal basis for such treatment is art. 6, paragraph 1 (b) of the GDPR:

performance of a sales contract.

Allianz Trade pay

If you choose the method of payment "purchase on invoice", we reserve, in order to preserve our legitimate interests, the right to carry out a solvency check via Allianz Trade pay, provided by Euler Hermes Services SAS, 1 place des Saisons, 92048 Paris – La Défense, France.

To this end, we send Allianz Trade the company, contact and order data necessary for the credit check. We use the information received to assess the risk of default and to decide whether the payment method concerned is available.

The legal basis is art. 6, paragraph 1 (f) of the GDPR. Our legitimate interest lies in avoiding defaults and securing claims.

Albis-Leasing

The ALBIS Leasing Group, Ifflandstraße 4, 22087 Hamburg, Germany ("Albis"), is the supplier of leasing financing selectable during the ordering process. If you opt for this method of payment, you apply for leasing directly to Albis. Your data is processed and recorded for the purpose of implementing pre-contractual measures, and then the execution of the leasing contract and the provision of related services. Data processing includes a credit check. Personal data relevant to the performance of the contract may be:

First name and name / civility / title / company / legal form
Contact details
Date of birth
Solvency data
Bank details
Identification data
Billing address
Delivery address
IP address, including browser and device information
Order number of the shop
Amount payable

The legal basis for data processing is art. 6, paragraph 1 (f) of the GDPR.

More information on Albis' data protection provisions can be found at:https://www.albis-leasing.de/datenschutz

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. and Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter " PayPal").

The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For more details, please see PayPal's Privacy Statement:https://www.paypal.com/de/webapps/mpp/ua/private-full.

Apple Pay

The payment service provider is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. You can find Apple's Privacy Statement at:https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The supplier is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You will find the Google Privacy Statement here:https://policies.google.com/privacy.

Klarna

The supplier is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter ‘Klarna'). Klarna offers a variety of payment options (e.g., temperament purchase). If you opt for payment with Klarna (Klarna Checkout solution), Klarna will collect different personal data about you. Klarna uses cookies to optimize the use of the Klarna Checkout solution. Details on the use of Klarna cookies can be found at the following link:https://cdn.klarna.com/1.0/shared/content/policy/cookie/de/checkout.pdf.

You can read the details in the Klarna Privacy Statement via the following link:https://www.klarna.com/de/datenschutz/.

Paydirekt

The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (‘Paydirekt'). If you make the payment via Paydirekt, Paydirekt collects different transaction data and forwards it to the bank from which you are registered in Paydirekt. In addition to the data necessary for payment, Paydirekt may collect other data in connection with the processing of the transaction, such as the delivery address or certain items in the basket. Paydirekt then authenticates the transaction using the authentication procedure registered with the bank for this purpose. The amount of the payment is then transferred from your account to our account. Neither we nor third parties have access to your account data. Details of the payment with Paydirekt can be found in the Terms and Conditions and the data protection provisions of Paydirekt at:https://www.paydirekt.de/agb/index.html.

Sofortüberweisung

The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (‘Sofort GmbH'). Thanks to the Sofortüberweisung procedure, we receive a confirmation of payment in real time from Sofort GmbH and can start immediately to fulfil our obligations. If you have opted for the "Sofortüberweisung" payment method, you send the PIN code and a valid TAN code to Sofort GmbH, which can connect to your online bank account. After the connection, Sofort GmbH automatically checks the balance of your account and makes the transfer for our benefit using the TAN code you have transmitted. She then immediately sends us a confirmation of the transaction. After the connection, your movements, the authorized overdraft limit and the existence of other accounts and their balances are also verified automatically. In addition to the PIN and the TAN, the payment data you have entered as well as data concerning you are transmitted to Sofort GmbH. The data about you are your first and last name, address, telephone number(s), e-mail address, IP address and, if applicable, other data necessary for processing the payment. The transmission of this data is necessary to establish your identity unequivocally and prevent fraud attempts. Details of the payment can be found with Sofortüberweisung via the following link:https://www.klarna.com/sofort/.

American Express

The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (‘American Express').

American Express may transmit data to its parent company in the United States. Data transfer to the United States is based on Binding Corporate Rules. Details can be found here:https://www.americanexpress.com/en-cz/company/legal/privacy-centre/binding-corporate-rules/.

More information can be found in the American Express Privacy Statement:https://www.americanexpress.com/de/firma/legal/datenschutz-center/online-datenschutzerklarung/.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter "Mastercard").

Mastercard can transmit data to its parent company in the United States. Data transfer to the United States is based on Mastercard's Binding Corporate Rules. Details can be found here:https://www.mastercard.de/de/datenschutz.htmlandhttps://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter "VISA").

The United Kingdom is considered a data protection safe third country. This means that the United Kingdom has a level of data protection corresponding to that of the European Union.

VISA may transfer data to its parent company in the United States. The transfer of data to the United States is based on the European Commission's standard contractual clauses. Details can be found here:https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmittelilung/mitteilung-zu-zustangikeitsfragen-fur-den-ewr.html.

More information can be found in VISA's Privacy Statement:https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.