Data protection

data protection

Introduction

Amio Germany GmbH, based in Munich (hereinafter: “We”), as the operator of the online offering, is responsible for processing the personal data of users of the online offering. You can find our contact details in the imprint of the online offer; the contact persons for questions about the processing of personal data are named directly in this data protection declaration.

We take the protection of your privacy and private information very seriously. We collect, store and use your personal data only in accordance with the content of this data protection declaration and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this data protection declaration we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the online offering.

Personal Data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity such as your name, your email address or your postal address. However, information that cannot be linked to your identity (such as statistical information, such as the number of users of the online offering) is not considered personal information.

In principle, you can use our online offering without disclosing your identity and without providing any personal data. We then only collect general information about your visit to our online offering. However, for some of the services offered, personal data is collected from you. We will then generally only process this data for the purposes of using this online offer, in particular to provide the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, which is then voluntary information. We indicate in each case whether the fields are mandatory or voluntary. We will then provide information about the specific details in the relevant section of this data protection declaration.

There is no automated decision-making based on your personal data in connection with the use of our online offering.

Processing of personal information

We will store your information on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Access to your data is only possible for a few authorized people. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, complete protection against all dangers is not possible.

Your personal data is transmitted encrypted over the Internet.

Disclosure of personal data to third parties

We generally only use your personal information to provide the services you have requested. If we use external service providers to provide the service, their access to the data is exclusively for the purpose of providing the service. We use technical and organizational measures to ensure compliance with data protection regulations and also require our external service providers to do so.

Furthermore, we will not pass on the data to third parties without your express consent, especially not for advertising purposes. Your personal data will only be passed on if you have consented to the data being passed on or if we are entitled or obliged to do so due to legal regulations and/or official or court orders. This may in particular involve providing information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

To the extent that we transmit your personal data ourselves or through service providers to countries outside the European Union, we comply with the special requirements of Art. 44 ff. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is guaranteed in particular by an adequacy decision by the EU Commission or by suitable guarantees in accordance with Article 46 GDPR.

Legal basis for data processing

To the extent that we obtain consent for the processing of your personal data, Art. 6 Para. 1 lit. a) GDPR is the legal basis for the data processing.

If we process your personal data because this is necessary to fulfill a contract or as part of a contract-like relationship with you, Art. 6 Para. 1 lit. b) GDPR represents the legal basis for the data processing.

If we process your personal data to fulfill a legal obligation, Art. 6 Para. 1 lit. c) GDPR is the legal basis for the data processing.

The legal basis for data processing is Art. 6 Para. 1 lit. f) GDPR if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and this does not protect your interests, fundamental rights and freedoms of personal data require.

As part of this data protection declaration, we always point out the legal basis on which we base the processing of your personal data.

Data deletion and storage period

We always delete or block your personal data when the purpose of storage no longer applies. However, storage can also take place if this is provided for by legal requirements to which we are subject, for example with regard to legal retention and documentation obligations. In such a case, we will delete or block your personal data after the relevant requirements have expired.

Use of our online offering

Information about your computer

Every time you access our online offering, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system of the computer. We also record which website the online offering was accessed from. The IP address of your computer is only stored for the time you use the online offer and is then deleted or anonymized by shortening it. The remaining data is stored for a limited period of time.

We use this data to operate the online offering, in particular to identify and eliminate errors, to determine the utilization of the online offering and to make adjustments or improvements. These purposes also include our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.

Use of cookies

As is the case on many websites, cookies are used for our online offering. Cookies are small text files that are stored on your computer and store certain settings and data for exchange with our online offering via your browser. A cookie typically contains the name of the domain from which the cookie file was sent, information about the age of the cookie, and an alphanumeric identifier.

Cookies enable us to recognize your computer and make any default settings and preferences immediately available. The cookies we use are – as far as possible – so-called session cookies, which are automatically deleted after the end of the browser session. In some cases, cookies with a longer storage period can also be used so that your default settings and preferences can also be taken into account the next time you visit our online offering.

Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you when cookies are being sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online offering to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

To the extent that cookies are not required for our online offering, we ask you to consent to the use of cookies when you access the online offering for the first time. With regard to non-essential third-party cookies, you will find a more detailed description of the third-party services we use below. The legal basis for the associated data processing, including any data transfer, is your consent within the meaning of Article 6 Paragraph 1 Letter a) GDPR. Consent once given can be revoked at any time with future effect, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offering within the meaning of Art. 6 Para. 1 lit. f) GDPR and - to the extent that contracts are concluded or fulfilled via our online offering - the fulfillment of the contract within the meaning of Article 6 Paragraph 1 Letter b) GDPR.

Session ID analysis

If you decide against setting cookies, we will analyze your visit to our website in a pseudonymized form using the so-called session ID. The session ID is an identification number that is assigned to the visitor as a pseudonym for the duration of their visit to this website in order to be able to recognize the visitor's actions during this visit. The data collected and stored will not be combined with personal data about the bearer of the pseudonym. As part of the analysis, the data collected via the session ID is passed on to the Google Tag Manager and Google Analytics. It cannot be ruled out that data will be transferred to servers in the USA and that security authorities could potentially have access to the data.

The legal basis is Article 6 Paragraph 1 Letter f) GDPR; Our right lies in the optimization and needs-based design of our online offering.

Integration of third-party services

For some functions in our online offering, we use third-party services. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and we do everything we can to ensure that third-party providers also provide transparent information about the extent of the processing of personal data and comply with data protection regulations.

Google Tag Manager

For our online offering we use the Google Tag Manager from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: “Google”). Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google services can be integrated into a website via Google Tag Manager. When using Google Tag Manager, a connection to Google's servers is established. This means that the IP address of the browser of the device used by the visitor to this website is stored by Google. It cannot be ruled out that in this context data will be transmitted to Google in the USA and that US security authorities may have access to the data. However, cookies are not set in connection with the use of Google Tag Manager.

Further information about the Google Tag Manager and data processing by Google can be found here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

Our legal basis for using the Google Tag Manager is our legitimate interest in accordance with Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest is to manage the tracking codes in our online offering, which enable us to analyze the use of our online offering and to improve and personalize our services.

Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analysis service from Google.

As part of Google Analytics, Google uses cookies, among other things, for evaluations. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your use of the online offering is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government authorities may thereby have access to this data. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

On our behalf, Google uses this information to evaluate your use of the online offering, to compile reports on website activity and to provide other services related to website and Internet use to us as the operator of the online offering. In addition, Google may use the data for its own purposes. As part of these purposes, Google, for example, creates a profile of user behavior or links the data with other data, for example with an existing Google account. We have no influence on these data processing operations. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. For more information, please see Google's data protection information, which is linked below.

We also use the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the following paragraph. Further information about the “demographic characteristics” function can be found on Google at https://support.google.com/analytics/answer/2799357?hl=de.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link http ://tools.google.com/dlpage/gaoptout?hl=de. Further information can be found at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). We would like to point out that on our website Google Analytics is supplemented by the code “anonymizeIp();” has been extended to anonymize the IP addresses, with the last octet being deleted.

Cookies will only be set if you have given your express consent to this. Our legal basis is your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR.

Retargeting and remarketing

Retargeting or remarketing are technologies in which users who have previously visited a certain website are shown appropriate advertising even after they have left that website. For this it is necessary to recognize internet users beyond their own website, for which cookies from the relevant service providers are used; In addition, previous usage behavior is taken into account. For example, if a user looks at certain products, these or similar products can later be shown to them as advertising on other websites. It is personalized advertising adapted to the needs of each user. For this personalized advertising, it is not necessary for the user to be identified beyond recognition. We therefore do not combine the data used for retargeting or remarketing with other data.

We use such technologies to serve ads on the Internet. We use third-party providers to place the ads. We use, among other things, offers from Google, which enable the automatic display of products of interest to the Internet user. This function is implemented through cookies. It cannot be ruled out that in the course of this process data will be transferred to Google in the USA and US security authorities will have access to the relevant data.

Associated cookies will only be set if you have given your consent. Our legal basis is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

Further information about this technology can be found in the Google data protection regulations at https://policies.google.com/privacy?hl=de. The installation of cookies for Google Remarketing and Google AdWords Conversion Tracking can also be done by setting the respective browser software by visiting the website http://www.google.com/policies/privacy/ads/ and changing the corresponding settings overall be prevented in advance.

Facebook Custom Audience

Remarketing tags from Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (hereinafter: “Facebook”) are integrated into our online offering. When you visit our online offering, a direct connection is established between your browser and the Facebook server via the remarketing tags. This means that Facebook receives the information that you have visited our online offering with your IP address. In this way, Facebook can assign your visit to our online offering to your Facebook user account - if you are registered there. We can use the information obtained in this way to place advertisements via Facebook. It cannot be ruled out that data will be transferred to Facebook servers in the USA and in this context US security authorities may be able to gain access to the relevant data. We would like to point out that we have no further knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's privacy policy at www.facebook.com/about/privacy/.

The legal basis for the use of remarketing tags is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. If you do not want data to be collected via Facebook's remarketing tags, you can also deactivate the use of Facebook Custom Audience via the following link: www.facebook.com/ads/website_custom_audiences/.

Google Maps

We use the map service Google Maps for our online offering. Google Maps is a service provided by Google. Only technically necessary cookies are set for the maps integrated into our online offering.

In order to comply with data protection regulations, the terms of use for the map service contain data protection regulations that serve your protection. Google's terms of use for the map service can be found at https://www.google.com/intl/de_US/help/terms_maps.html; general explanations from Google on data protection are available at https://policies.google.com/privacy ?hl=de&gl=de.

The legal basis for the integration of the map service is Article 6 Paragraph 1 Letter f) GDPR; Our legitimate interest lies in providing maps for your orientation.

Hotjar

We also use Hotjar for statistical evaluations. Hotjar is a web analytics service provided by Hotjar Ltd, Level 2, St Julians Business Center 3, Elia Zammit Street, 3155 St Julians STJ, Malta (“Hotjar”). Hotjar uses cookies that enable your use of the website to be analyzed. The information generated by the cookies about your use of this website is usually transmitted to a Hotjar server in Ireland and stored there. Website visitors receive a unique user ID that can be assigned to you on repeat visits. Visitor IP addresses are suppressed before they are saved. The last octet of IP addresses is set to 0 so that the full IP address is not recorded. The first three octets of the IP address are only used to determine the geographical location of the visitor. On behalf of the operator of this website, Hotjar will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

If you do not want Hotjar to collect data, you can deactivate it here: https://www.hotjar.com/legal/compliance/opt-out.

Further information can be found at https://www.hotjar.com/legal/policies/privacy or https://www.hotjar.com/legal/compliance/gdpr-commitment (general information about Hotjar and data protection). The legal basis for data processing is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

Facebook fan page

In addition to our own online offering, we also operate a fan page on the social network Facebook. We use the fan page to provide information about our activities and provide a channel for communication. The social network Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Facebook”).

Delimitation of responsibility

As much as possible on Facebook, we try to ensure the protection of your privacy and your private data. To the extent that your personal data is processed by us in connection with your visit to the fan page, the explanations in this data protection declaration apply without restriction. Due to the integration of the fan page into Facebook's offering, it should also be noted that personal data is processed by Facebook at the same time. We have no influence on data processing by Facebook; In particular, Facebook does not act as a processor for us under our responsibility. Data processing by Facebook applies – at least according to Facebook – the Facebook guidelines, which can be accessed at https://de-de.facebook.com/policy.php

From a data protection perspective, it can be assumed that Facebook and we are jointly responsible for the operation of the fan page. In accordance with data protection regulations, we have reached an internal agreement with Facebook to delimit responsibility.

Facebook Insights

Facebook offers fan page operators the opportunity to obtain an overview of the use of the fan page and its users via the page insights functions. Above all, statistical data can be accessed and evaluated via page insights. We use the data from page insights to make the fan page as attractive and efficient as possible. For this purpose, Facebook provides us with data that Facebook itself has generated. Facebook provides further information on how the page insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Facebook Messenger

Facebook offers users who are registered with Facebook the opportunity to communicate directly via Facebook Messenger. If you contact us via messenger, the data transmitted will be stored and used by us exclusively to answer your request. The legal basis for the processing of your data is your consent within the meaning of Article 6 Paragraph 1 Letter a) GDPR and our legitimate interest within the meaning of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the control of misuse.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for your personal data when the respective conversation has ended. For us, the conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified. The user has the option at any time to withdraw his consent to the processing of personal data; In this case, the data will be deleted immediately if there is no basis for further storage.

Further information about Facebook

If you have any questions about our use of personal data in connection with the use of the Facebook fan page, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our data protection declaration. If you have any questions about data protection on Facebook, we would like to ask you to contact Facebook directly. The Federal Office for Information Security (BSI) also provides general information on the safe use of social networks on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/socialeNetze_node.html available.

Instagram account

In addition to our own online offering and our Facebook fan page, we also operate an account on the social network Instagram. We also provide information about our activities via the Instagram account and offer a channel for communication. The social network Instagram is operated by Facebook.

Data protection responsibility

Within the scope of the options provided by Facebook, we try to ensure the protection of your privacy and your private data. To the extent that your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this data protection declaration apply without restriction. Due to the integration of the account into Facebook's offering, it should also be noted that personal data is processed by Facebook at the same time. We have no influence on data processing by Facebook; In particular, Facebook does not act as a processor for us under our responsibility. The Facebook guidelines apply to data processing by Facebook - at least according to information from Facebook - which can be accessed at https://de-de.facebook.com/help/instagram/519522125107875.

From a data protection perspective, it can be assumed that Facebook and we have two separate responsibilities for the operation of the account on Instagram and the associated communication and evaluation options. To the extent that your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case if you communicate directly with us using the “Instagram Direct Messaging” function and provide us with your data. To the extent that your personal data is processed by Facebook and Facebook alone decides on the purposes and means of data processing, Facebook is solely responsible for this data processing. This applies in particular to the evaluation of user behavior by Facebook for its own purposes.

Instagram Insights

Facebook offers the operators of Instagram accounts the opportunity to obtain an overview of the use of the account and its users via the “Instagram Insights” function. Above all, statistical data can be accessed and evaluated via Instagram Insights. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Facebook provides us with data that Facebook itself has generated under its own responsibility. The data we receive from Facebook is mostly anonymized data and statistics. To the extent that we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our Instagram account.

Facebook provides further information about Instagram Insights at https://www.facebook.com/help/instagram/788388387972460.

Instagram direct messaging

On Instagram you have the opportunity to communicate with us directly using the “Instagram Direct Messaging” function. If you contact us via the Instagram Direct Messaging function, the data transmitted will be stored and used by us exclusively to answer your request. The legal basis for the processing of your data is your consent within the meaning of Article 6 Paragraph 1 Letter a) GDPR and our legitimate interest within the meaning of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the control of misuse.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for your personal data when the respective conversation has ended. For us, the conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified. You have the option to withdraw your consent to the processing of personal data at any time; In this case, we will delete the data immediately if there is no basis for further storage.

Further information about Instagram

If you have any questions about our use of personal data in connection with the use of our Instagram account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our data protection declaration. If you have any questions about data protection on the Instagram social network offered by Facebook, we would like to ask you to contact Facebook directly. We would also like to point out at this point that the Federal Office for Information Security (BSI) on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/socialeNetze_node.html provides general information on the safe use of social networks.

Registration

You can register to use our online offering. To do this, you must provide the data requested during registration, for example name, address and email address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent to use the data. You have the advantage of not having to re-enter this data each time you use or order.

If consent is given, the legal basis for processing data for registration is Article 6 (1) (a) GDPR. If you register with us to fulfill or initiate a contract, the legal basis for processing the data is also Article 6 Paragraph 1 Letter b) GDPR.

The information requested as a mandatory field during registration is necessary to fulfill or initiate a contract with us for certain services. However, you are not required to register; you can also order as a guest. In this case, however, you will have to enter all the data required to process the contract with each order.

When you register, an account will be created for you. The data in the account will be stored by us for as long as an active customer relationship exists. If no activity is detected over a period of three years, the status of the customer relationship is set to inactive. You can request deletion of your account at any time.

We offer optional registration via Facebook Connect. Facebook Connect is an offer from Facebook. When you use Facebook Connect, Facebook profile data and public data from your Facebook profile are transmitted to Amio Germany GmbH. We use and process the first and last name, gender, age, hometown, email address and Facebook ID to simplify registration for the use of our website. If you are already a customer of Amio Germany GmbH, only your Facebook ID will be processed. Your Facebook account will be linked to the AMIO Firenze account via your Facebook ID. This makes it possible for you to log in to our services using your Facebook access data using the “Login with Facebook” button. In addition, every time you log in, Facebook learns that you are currently using the AMIO Firenze service. The connection to Facebook can be revoked at any time on Facebook itself. Please also read Facebook's privacy policy.

The legal basis for the use of Facebook Connect is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

“My AMIO Firenze”

When you register for “My AMIO Firenze” you have access to the following areas:

- Account Settings

- My addresses

- My Orders

- My specialty store

- notepad

Order processing

When placing orders, we only use your personal data within our company and affiliated companies as well as with the company commissioned to process orders.

Storage and data transfer for orders

For order processing, we work with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. We pass on your address data (name and address) to the respective transport company that delivers the ordered products to you. The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR. The processing of your personal data is necessary to fulfill the contract with you.

We will store the data for as long as it is necessary to fulfill the contract. In addition, we store this data for the legally required period in order to fulfill post-contractual obligations and due to commercial and tax retention periods. This retention period is usually 10 years to the end of the respective calendar year.

Payment processing

Depending on the payment method chosen, payment processing for orders may be carried out through the involvement of a service provider.

If you pay by credit card, your necessary data such as name, address and purchase details will be forwarded to the respective credit card company.

If you pay via PayPal, you will be redirected to the PayPal website via a link. Your personal data will be processed. This includes your name, address, email address, telephone number if applicable and account or credit card details. Please note the general terms and conditions, terms of use and data protection principles of PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com.

When paying with Sofortüberweisung, you will be redirected via a link to the Sofortüberweisung website, a service of Sofort GmbH, Theresienhöhe 12, 80339 Munich, which belongs to Klarna Bank AB (publ), Sveavägen 46111 34 Stockholm, Sweden. Your personal data will be processed. This includes your name, address, email address, telephone number if applicable and account or credit card details. Please note the general terms and conditions, terms of use and data protection principles of Sofort GmbH, which can be accessed at https://www.klarna.com/sofort/.

The legal basis for payment processing is Article 6 Paragraph 1 Letter b) GDPR. The processing of your personal data is necessary to fulfill the contract with you, whereby you can freely choose the payment method.

We will store the data for as long as it is necessary to fulfill the contract. In addition, we store this data for the legally prescribed period in order to fulfill post-contractual obligations and due to commercial and tax retention periods. This retention period is usually 10 years to the end of the respective calendar year.

Communication with us

You can contact us in various ways, including using the contact form on our website. You are also welcome to receive regular information via our newsletter via email.

contact form

If you would like to use the contact form in our online offering, we will collect the personal data that you provide in the contact form, in particular your name and email address. We also store the IP address as well as the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of answering your inquiry or concern.

You can decide for yourself what information you send to us via the contact form. The legal basis for the processing of your data is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

After we have processed the matter, the data will initially be stored in case of any questions. Deletion of the data can be requested at any time, otherwise deletion will take place after the matter has been completely resolved; Statutory retention obligations remain unaffected.

Newsletter

When you register for our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by email on current topics as well as emails on special occasions, for example special promotions. The emails can be personalized and individualized based on our information about you.

To register for our newsletter, unless you have given us your consent in writing, we use the so-called double opt-in procedure, which means we will only send you a newsletter by email if you have expressly confirmed this to us beforehand that we should activate newsletter sending. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email.

The legal basis for the processing of your data is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR if you have expressly registered for the newsletter. Within the scope of the legal requirements, it may also be possible that you receive our newsletter from us without your express consent because you have ordered goods or services from us, we have received your email address in this context and you are entitled to receive information have not objected by email. In this case, the legal basis is our legitimate interest in transmitting direct advertising in accordance with Article 6 Paragraph 1 Letter f) GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic tariffs. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer.

Social media

In our online offering you will find links to the social networks Facebook, Instagram and Google+ as well as the video platform YouTube. You can recognize the links by the respective logo of the provider.

Clicking on the links opens the corresponding social media pages to which this data protection declaration does not apply. For details on the applicable regulations, please refer to the respective data protection declarations of the individual providers; You can find these at:

Facebook: http://www.facebook.com/policy.php

Instagram: https://help.instagram.com/519522125107875

Youtube: https://policies.google.com/privacy?hl=de

Vimeo: https://vimeo.com/features/video-privacy

Pinterest: https://policy.pinterest.com/de/privacy-policy

No personal information is transmitted to the respective provider before the corresponding links are accessed. Your access to the linked page is also the basis for data processing by the respective provider.

Use of YouTube

YouTube videos are integrated into our online offering and we use a plugin from the YouTube service operated by Google (hereinafter: “YouTube”) to play them. The service operator is Google.

We use the YouTube service in extended data protection mode in order to protect your privacy as best as possible. If you access a website from our online offering on which a YouTube video is embedded, Google initially only receives the information necessary for the integration and no cookies are set for usage analysis. Only when you play the embedded video will Google receive further information; Google may also set cookies to analyze your user behavior. When you play the video, Google's YouTube servers are informed, for example, which page of our online offering you are using to play the video.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behavior directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent data from being assigned to your Google profile by logging out of your YouTube account. Further information on how to handle user data can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube so that we can show you videos and provide you with better information about us and our services. The legal basis for the integration of the videos is our legitimate interest within the meaning of Article 6 Paragraph 1 Letter f) GDPR; However, the playing of the videos and the associated further data processing only take place on the basis of your consent within the meaning of Art. 6 Para. 1 lit. a) GDPR.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and also informing you about the rights to which you are entitled. If you would like more information or would like to exercise your rights, you can contact us at any time so that we can take care of your concerns.

Rights of those affected

You have extensive rights regarding the processing of your personal data. First of all, you have a comprehensive right to information and can, if necessary, request the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have the right to object. You also have the right to data portability with regard to the personal data you provide to us.

If you would like to exercise any of your rights and/or receive further information about them, please contact our customer service. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection

Consent once given by you can be freely revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation. The contact persons for this are also our customer service and our data protection officer.

If the processing of your personal data is not based on consent but is based on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of data processing. You will be informed of the result of the review and - if data processing should still be continued - you will receive further information from us as to why data processing is permitted.

complaints

If you believe that our processing of your personal data is not in accordance with this data protection declaration or the applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. You can also complain to us directly.

Further information and changes

Links to other websites

Our online offering may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also find out about the respective data protection declarations on other websites.

Changes to this privacy policy

The status of this data protection declaration is indicated by the date (below). We reserve the right to change this privacy policy at any time with future effect. A change occurs in particular in the event of technical adjustments to the online offering or changes to data protection regulations. The current version of the data protection declaration is always available directly via the online offer. We recommend that you regularly inform yourself about changes to this data protection declaration.

Status of this data protection declaration: October 2023