Data Protection

Privacy Policy

We, as the operator of the websites at www.trix.de (also "website"), are responsible for the processing of personal data of the visitor ("you")of thewebsite in accordance with applicable data protection laws, in particular the General Data Protection Regulation ("GDPR").

With the following privacy notice we transparently inform you, within the scope of our information obligations (Art. 13 et seq. GDPR), about our processing of your personal data when using our website and on which legal basis we may process your personal data. You will also receive information regarding your data subject rights and competent supervisory authorities.

1. Information on the Data Controller

Gebr. Märklin & Cie. GmbH
Stuttgarter Straße 55-57
D-73033 Göppingen
Germany

Phone: +49 (0) 71 61 / 608-0
Fax: +49 (0) 71 61 / 69820
E-Mail: service(at)maerklin.de
 

2. Data Protection Officer

We have appointed a company data protection officer.

Andreas Zimmermann
Liststraße 4
73035 Göppingen
E-mail: a.zimmermann@maerklin.de 
Phone: +49(0)7161-9880478

3. Informational use of our website

When you call up our website merely to visit it, so-called log files are processed by being automatically recorded by our system.

The following log files are processed automatically:

• IP address of the requesting computer
• Type of Internet browser used
• Operating system and its version
• Operating system interface
• Pages accessed
• Date and time of the visit
• Time zone difference from Greenwich Mean Time (GMT)
• Access status/http status code
• Transmitted data volume
• Referrer

The log files contain your IP address, but it is shortened before storage. Therefore, an assignment to you is not possible and your data is also not stored together with other personal data.

The short-term processing of your data for anonymisation purposes is necessary to provide our website. This purpose also justifies our legitimate interest in processing your data on the legal basis ofArt. 6 para. 1 sentence 1 lit. f GDPR.
 

4. Website hosting

Our website is operated on the servers of the provider 21TORR GmbH, Heinestr. 72, 72762 Reutlingen, with server location in Germany. This means that the data we collect when you visit this website is stored by our hoster.

The legal basis for processing your personal data is Art. 6 para. 1 sentence 1 lit. f GDPR, as it is in our legitimate interest to use the services of a professional provider for the secure and efficient provision of our website. We have concluded a data processing agreement with 21TORR GmbH.
 

5. Contacting us via our contact form

You can contact us electronically via our contact form, e.g. to provide us with feedback, to send inquiries about the services we offer or to ask us general questions. If you use this option, you transmit the following data to us:

• E-mail address (to contact you)
• Title, first name and surname (to address you and for the purposes of abuse prevention)
• Message and subject
• Phone number (optional)

The legal basis for the processing of your data for the purpose of processing your contact request is Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the purpose of your contact request has been fully clarified.

If your contact request is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data is stored for as long as it is required for the performance of the contract or pre-contractual measures. Beyond this, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

If we obtain your consent, the additional legal basis for processing your data to process your contact request is Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future by informing us (see section 1 above).

In addition to the data you provide to us, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data is in our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to counteract misuse. This data, which we also collect when you contact us, will be deleted as soon as it is no longer required, at the latest when your contact request has been fully clarified.

You can inform us at any time (see section 1 above) that we should delete the data provided during the conversation. In this case, to the extent permitted, all personal data from the conversation will be deleted and it will not be possible to continue the conversation.

6. Contact via e-mail, fax or telephone

You have the option of contacting us by e-mail, fax or telephone. Your personal data transmitted in this way will be stored by us. The data is processed exclusively in order to deal with your contact request appropriately, which corresponds to our legitimate interest. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact request has been comprehensively clarified.

If your contact request is aimed at concluding a contract with us, the additional legal basis for processing your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data is stored for as long as it is required for the execution of the contract or the pre-contractual measures. Beyond that, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

You can inform us at any time (see section 1 above) that you would like us to delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, if permissible, and a continuation of the conversation is not possible.
 

7.  Newsletter

On our website, we offer you the opportunity to subscribe to our newsletter free of charge in order to be informed about news concerning the platform.

7.1  Anmeldung zu unserem Newsletter

In addition to your declaration of consent, we need your e-mail address. Further information, e.g. your name, is voluntary and serves to address you personally.

We will only send you the newsletter if you first confirm your registration to us via a confirmation e-mail sent to you for this purpose by clicking on the link provided. This is to ensure that only you can subscribe to the newsletter. Your confirmation in this regard must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

The legal basis forthe newsletter dispatch as well as voluntary additional information is Art. 6 para. 1 sentence 1 lit. a GDPR. By sending the newsletter registration, you agree to the processing of your data by us.

In addition, we store the time (date and time) of the transmission of your data to us, as well as your IP address, as part of your newsletter registration. The processing of this data corresponds to our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR in order to ensure the security of our systems and to counteract misuse. In the case of the confirmation e-mail sent for control purposes, we also save the date and time of the click on the confirmation link and your IP address in order to be able to trace any possible misuse of your e-mail address at a later date.

Your data will be processed exclusively in connection with the sending of newsletters. The purpose of processing your e-mail address is to be able to send you the newsletter. Further data within the scope of the registration process serve either to address you personally or also to ensure the security of our services and to prevent misuse of the e-mail address used.

Your data will only be stored for as long as is necessary to achieve the purpose. Your e-mail address will therefore be stored for the duration of your active newsletter subscription if you have given your consent for this. The data that we additionally collect automatically during your subscription (IP address, date and time) will be deleted at the latest when you end your newsletter subscription.

7.2  Newsletter service provider

To send the newsletter, we use the services of Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, to whom we pass on the data you provided when registering for the newsletter. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on Inxmail's servers in the EU.

This disclosure is made in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly.

The processing of your data by Inxmail is carried out on the basis of an order processing agreement in accordance with Art. 28 GDPR, which we have concluded with Inxmail.

7.3 Newsletter tracking

Due to a "web beacon" or "tracking pixel" implemented in our newsletter (this is a pixel-sized file), we can track whether the newsletter has been opened. This is done by loading the graphic together with all other images from the server when the e-mail is opened. This image call is tracked and enables the evaluation of the opening rate.

In addition, we can track whether links contained in the newsletter have been clicked on. This is done by temporarily redirecting the recipient via the server of our newsletter service provider after clicking on a link and then forwarding the recipient to the target address.

Within the scope of tracking, technical information (e.g. IP address, browser as well as time of retrieval and opening of the newsletter) is also recorded and statistically evaluated. The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. We receive aggregated statistics that are automatically created by our service provider (see above). As a rule, we only have a view of the percentage of recipients who have opened the newsletter or which content was particularly well received. This data is used exclusively for the statistical analysis of newsletter campaigns and can be used by us to better adapt future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

The evaluation of your user behaviour only takes place if you have consented to the newsletter dispatch and the associated personalised data evaluation. The legal basis forthe data processing is your consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a GDPR.

We have concluded a data processing agreement with Inxmail, by which we oblige Inxmail to protect our customers' data and not to pass it on to third parties. You can view Inxmail's privacy policy here:
https://www.inxmail.de/datenschutz.

WITHDRAWAL OF CONSENT / Unsubscribe Newsletter

You can unsubscribe or cancel our newsletter at any time. Unfortunately, a separate revocation of your consent to newsletter tracking is not possible. If you wish to object to newsletter tracking, you must therefore also unsubscribe from the newsletter.  You will find the link to do so at the end of each newsletter. You can also unsubscribe from the newsletter at any time by sending a message to us (section 1) or via the following link: https://www.maerklin.de/de/service/newsletter/abbestellen

By doing so, you withdraw your consent with effect for the future or object to any further use of your data for the purpose of sending and tracking the newsletter. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. The withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

8. Direct marketing

If you leave personal data when using our services, for example a purchase via our website, we reserve the right to process your e-mail address, your first and last name, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name for direct advertising measures, for example to send you our newsletter or to send you postal advertising letters for the purchase of further products (e.g. vouchers for our online shop). This is done exclusively in the context of direct advertising for our own or similar goods or services.

The legal basis for sending advertising by post after an order is Art. 6 para. 1 sentence 1 lit. f GDPR. The legal basis for sending newsletters in connection with the sale of goods or services is Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with. § 7 para. 3 UWG. The processing of your personal data for the purpose of postal and/or electronic direct advertising corresponds to our legitimate interest.

If we send you a newsletter following an order on our website, we store your e-mail address for the purpose of advertising our own or similar goods or services until you unsubscribe from the newsletter (cf. para. 6). You can object to the storage and use of your data for the purpose of direct advertising at any time by sending us a message to this effect (section 1).

9. Creating a club account (Märklin Insider Club, Trix Club, LGB Club)

You can register for our (fee-based) clubs on our website. To set up the club account, we need the following information from you:

• First and last name
• Address and country for invoicing
• E-mail address (to send you confirmation and documents to create the account)
• Date of birth (to verify your age and for fraud prevention)
• Membership details

All other information is optional. We will store the following voluntary information with your data if you provide it to us:

• Titel (to address you)
• Your phone number (to be able to contact you in case of questions about your membership)
• Language selection (to be able to provide you with our offer in your language)

If you link your account in our online store to your club account by entering your club number in the online store account, your data will be merged. This is for the purpose of offering you certain discounts and free shipping for orders over a certain amount.

The data you provide during registration will be processed for the purpose of managing your account and providing the associated services. The legal basis for the storage of your user account data is Art. 6 para. 1 sentence 1 lit. b GDPR.

We process your data via the website as long as you do not delete your customer account with us. If you make changes to your details, the old details will be deleted and only the updated data will be stored. Beyond this, we only store your data in order to comply with our legal obligations (e.g. tax obligations) (Art. 6 para. 1 lit. c GDPR). In this case, we block your data to the extent that it is only processed for the necessary purposes.

You can submit a request to us to delete your account at any time (e.g. by sending an email to the email address specified in section 1).
 

10.  Payment methods

If you select a payment provider on our site for payment, this provider also receives your personal data, for example your name, address and bank account details. In addition, our house bank receives your bank connection data when an electronic payment is received. The legal basis for processing your personal data for payment purposes is Art. 6 para. 1 sentence 1 lit. b and f GDPR.

Credit card: When you pay with your credit card on our website, your credit card provider receives the information that you have placed an order with us. Your credit card provider may carry out a credit check. You can find more information about this on the respective website of your credit card provider.

Direct debit/pre-payment: If you pay by direct debit on our website, our house bank will receive your bank details for payment processing.
 

11. Applicant data

We provide information about vacancies in our team on our website and you can send us your application by e-mail. We process your data to handle your application procedure, which means that your application will be viewed by the employees responsible for pre-selection. Your data will not be passed on to third parties and we will not use your data for other purposes.

Your application data will be stored by us. If we reject your application, we will only store the data for as long as necessary, for a maximum period of six months, unless you give us your consent to store the applicant data for longer in order to contact you after this period has expired. If you give us your consent for longer storage, we will delete your data at the latest as soon as one year has passed since the last application-related contact between you and us.

The legal basis for the processing of your data is Art. 88 para. 1 GDPR in conjunction with Section 26 BDSG.

12. Links zu sozialen Netzwerken

On our website, we use small icons and other links that refer to our website on third-party platforms. These are hyperlinks, so no data is automatically transferred from you, unless you click on the icons or the corresponding link. In this case, a new window opens in your browser with the website of the third-party provider.

12.1Facebook page (formerly "Facebook fan page")

We operate a so-called Facebook page on the social media platform Facebook (Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland (hereinafter: "Meta")), which we link to on our website via the Facebook icon. As long as you do not click on the link, Meta does not receive any data from you. If you click on the link, for example to view our company presence on Facebook or to "like" our Facebook page, Meta will receive data from you (which data Meta receives also depends on whether you are logged in to Meta with your user profile while you click on the page or not). In addition, Meta uses so-called cookies that are stored on your end device when you visit our Facebook page, even if you do not have your own Facebook profile or are not logged into it during your visit to our Facebook page. These cookies allow Meta to create user profiles based on your preferences and interests and to show you advertising (inside and outside of Facebook) tailored to these. Cookies remain on your device until you delete them. You can find more information about the cookies used on Facebook at https://www.facebook.com/policies/cookies/.   

According to its own information, Meta uses this data for a wide variety of purposes and transfers it worldwide, both internally to other Meta companies and to a wide variety of external partners. Meta relies on various legal bases for this data processing, which you can find in detail in Meta's data policy. You can find the data policy under the following link: https://www.facebook.com/policy.php  

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data, i.e. statistics (e.g. user growth, user demographics, use of individual functionalities) on our company Facebook page, which no longer have any personal reference. This data, called "page insights", is created on the basis of so-called "events" logged by Meta. An "event" can be, for example, the fact that someone has marked a certain post with a "Like". As the site operator, we do not have access to the personal data that is processed in the context of events, but only to the summarised page insights. Events used to create Page Insights do not store IP addresses, cookie IDs or any other identifiers associated with individuals or their devices, other than a Facebook user ID for individuals logged into Facebook. More information about Page Insights can be found at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data 

According to the requirements of the GDPR, we are jointly responsible with Meta for the data processing on our Facebook page (Art. 26 GDPR). Accordingly, we have concluded an agreement with Meta, provided by Meta, in which this joint responsibility is regulated. You can find the agreement in German under the following link: https://www.facebook.com/legal/terms/page_controller_addendum  

It follows that Meta is primarily responsible for the aggregated Insight data. In addition, Meta will comply with all obligations under the GDPR with regard to the processing of Insight Data (including Art. 12, 13 GDPR, Art. 15-21 GDPR and Art. 32-34 GDPR). If you send us a request regarding our Facebook page, we will inform Meta in a timely manner. Meta will respond to the request in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Insofar as you consent to the data processing (in particular to the setting of cookies), the processing is also carried out on the basis of § 25 para. 1 TTDSG or Art. 6 para. 1 sentence 1 lit. a GDPR.

If you use our Facebook page to contact us (e.g. by creating your own posts, responding to one of our posts or by sending us private messages), we process the data you provide exclusively in order to process your contact. The legal basis for the processing of your personal data is thus Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact has been fully clarified. You can inform us at any time that you would like us to delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, if permissible, and a continuation of the conversation is not possible.

12.2 Instagram

We operate a corporate presence on the social media portal Instagram. The operator of Instagram is Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland, whereby the platforms Facebook and Instagram share the technical infrastructure according to Meta's own information. In the following, the term "Instagram" is used for the social media platform and the term "Meta" for the operator of this platform.

On our website, we link to our company profile on Instagram using the Instagram icon. As long as you do not click on the link, Meta will not receive any data from you. If you click on the link, for example to view or subscribe to our company profile on Instagram, Meta will receive data from you (which data Meta receives also depends on whether you are logged in to Instagram with your user profile while clicking on the page or not). In addition, Meta uses so-called cookies, which are stored on your device when you visit our corporate website even if you do not have your own Instagram profile or are not logged into it during your visit to our corporate website. These cookies allow Meta to create user profiles based on your preferences and interests and to show you customized advertising (inside and outside Instagram). Cookies remain on your device until you delete them. You can find more information about the cookies used by Meta at https://help.instagram.com/1896641480634370?ref=ig  

Nach eigenen Angaben nutzt Meta diese Daten für unterschiedlichste Zwecke und übermittelt According to its own information, Meta uses this data for a wide variety of purposes and transfers it worldwide, both internally to other Meta companies and to a wide variety of external partners. Meta relies on various legal bases for this data processing, which you can find in detail in Meta's data policy. You can find the data policy of Instagram under the following link: https://www.instagram.com/legal/privacy/ Facebook's data policy, which also applies to Instagram, can be found at https://www.facebook.com/policy

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. user growth, user demographics, use of individual functionalities), which no longer have any personal reference. These are called "Instagram Insights". You can find more information about Instagram Insights on the corresponding information page of Meta, which refers to all Meta products (and thus also to Instagram). You can access this information page at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

According to the requirements of the GDPR, we are jointly responsible with Meta for the data processing on our Facebook page (Art. 26 GDPR). Accordingly, we have concluded an agreement with Meta, provided by Meta, in which this joint responsibility is regulated. You can find the agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum 

It follows that Meta is primarily responsible for the aggregated Insight data. In addition, Meta will comply with all obligations under the GDPR with regard to the processing of Insight Data (including Art. 12, 13 GDPR, Art. 15-21 GDPR and Art. 32-34 GDPR). If you send us a request regarding our Facebook page, we will inform Meta in a timely manner. Meta will respond to the request in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Insofar as you consent to the data processing (in particular to the setting of cookies), the processing is also carried out on the basis of § 25 para. 1 TTDSG or Art. 6 para. 1 sentence 1 lit. a GDPR.

If you use our Instagram profile to contact us (e.g. by creating your own posts, responding to one of our posts or by sending us private messages), we process the data you provide exclusively in order to process your contact request. The legal basis for the processing of your personal data is thus Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact request has been fully clarified. You can inform us at any time that you would like us to delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, if permissible, and a continuation of the conversation is not possible.

12.3  X (formerly known as Twitter)

We have a company profile on the social media portal Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter "Twitter")), which we link to on our website via the Twitter icon. As long as you do not click on the link, Twitter will not receive any data from you. If you click on the link, for example to view our company presence on Twitter, Twitter will receive data from you (which data Twitter receives also depends on whether you are logged in to Twitter with your user profile while you click on the page or not). In addition, Twitter uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own Twitter profile or are not logged into it during your visit to our company website. Among other things, these cookies allow Twitter to use tracking tools and display personalized advertising (inside and outside Twitter). Cookies remain on your device until you delete them. You can find more information about the cookies used by Twitter at https://help.twitter.com/de/rules-and-policies/twitter-cookies  

According to its own information, Twitter uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including recipients that are not located within the EU. Twitter bases this data processing on various legal bases. You can find an overview of this in Twitter's privacy policy, which you can access at the following link: https://twitter.com/de/privacy

While Twitter uses this data for various purposes under its own responsibility, we can only see aggregated data on our company website, i.e. statistics (e.g. number of retweets and playback times for videos), which no longer have any personal reference. This data is analyzed using the "Twitter Analytics" tool. You can find more information about the data on the corresponding Twitter information page at the following link: https://help.twitter.com/de/managing-your-account/using-the-tweet-activity-dashboard

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Section 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR.

If you use our Twitter presence to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we process the data you provide exclusively to process your contact request. The legal basis for the processing of your personal data in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, to the extent permitted, all personal data from the conversation will be deleted and it will not be possible to continue the conversation.
 

12.4  YouTube profile

We operate a corporate presence on the video sharing platform YouTube. The operator of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the following, the term "YouTube" is used for the video sharing platform, the term "Google" for the operator of the platform.

On our website, we link to our company presence on YouTube using the YouTube icon. As long as you do not click on the link, Google will not receive any data from you. If you click on the link, for example to view or subscribe to our company presence on YouTube, Google will receive data from you (which data Google receives also depends on whether you are logged in to YouTube with your user profile while you click on the page or not). Google also uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own YouTube profile or are not logged into it during your visit to our company website. Among other things, these cookies allow Google to collect and analyze data on target group interactions and website statistics (inside and outside YouTube). Cookies remain on your device until you delete them. You can find more information about the cookies used by Google at https://policies.google.com/technologies/cookies?hl=de&utm_source=ucb  

According to its own information, Google uses this data for a wide variety of purposes and transmits it worldwide, both internally to affiliated companies and to companies, organizations or persons outside Google. Google bases this data processing on various legal bases, details of which can be found in Google's privacy policy. You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=de.

While Google uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. playbacks, playback times and types of access sources), which no longer have any personal reference. This performance data is analyzed using the "YouTube Analytics" tool. You can find more information about the performance data on the corresponding information page of Google under the following link: https://support.google.com/youtube/answer/9002587?hl=de

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR.

If you use our YouTube presence to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will only process the data you provide in order to process your contact request. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, to the extent permitted, all personal data from the conversation will be deleted and it will not be possible to continue the conversation.
 

13.  Cookie consent management

In order to obtain and document the consent of our visitors to the cookies and other technologies we use, we use the cookie consent tool Usercentrics GmbH, Rosental 4, 80331 Munich, Germany.

In this context, the cookie consent tool sets technically necessary cookies to store your cookie consents. These cookies store your consents that you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

The legal basis for the use of the cookie consent tool and the setting of the technically necessary cookies are Art. 6 para. 1 sentence 1 lit. c, f GDPR and § 25 para. 2 TTDSG. It is in our legitimate interest to use the services of a professional service provider to manage and document the cookie settings of our visitors.

We would like to point out that the aforementioned cookie consent tool is integrated via a so-called Content Delivery Network (CDN), which is provided by SIMBA-DICKIE-GROUP GmbH, Werkstraße 1, 90765 Fürth - Germany. For this purpose, your IP address is only stored in the CDN's load balancer's main memory for the duration of the request and then immediately deleted. This short-term processing of our visitors' IP address is technically absolutely necessary for loading the cookie consent tool. No further storage takes place and the IP address processed via the CDN is not processed for any other purposes.  The legal basis for the short-term processing of your IP address for the purpose of loading the cookie consent tool is Art. 6 para. 1 sentence 1 lit. f GDPR. In view of the low intensity of intervention (short-term processing of the IP address for a limited processing purpose), the integration of the cookie consent tool via the CDN corresponds to our legitimate interest in an efficient and at the same time cost-effective implementation of this tool.

14.  Integration of YouTube videos

We integrate videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the purpose of making our website more appealing. In the following, the term "YouTube" is used for the video portal, the term "Google" for the operator of this portal.

When integrating YouTube videos, we use the extended data protection mode, in which, according to the provider, information about you is only shared with Google if you activate the video by clicking on the play button of the video.

If you activate the video, Google may use cookies to collect information for analysis and advertising purposes and to improve the user experience. According to Google, the data is processed pseudonymously. However, especially if you are logged in to your Google or YouTube account, the data may be directly linked to these accounts.

According to its own information, Google uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those that are not located within the EU. Google relies on various legal bases for this data processing. An overview is provided by Google's privacy policy, which you can access at the following link: https://policies.google.com/privacy?hl=de  

In addition, it is possible that so-called Google Fonts (fonts provided by Google) will be loaded when the video is played.

We have embedded YouTube videos on our website in such a way that they are only loaded when you have given your consent. The legal basis for the integration of the YouTube service on our website and the associated processing of your data is therefore your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

If YouTube sets cookies when you actively click on and play a YouTube video on our site, we process your data on the basis of consent (§ 25 para. 1 TTDSG or Art. 6 para. 1 sentence 1 lit. a GDPR).

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection setting on our website.

Note on data transfers to the USA:

Google Ireland Ltd. is a subsidiary of the US Google group, so that your personal data may also be transferred to US Google group companies (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or also "EU-US DPF") exists. Google LLC is certified as a US company under the EU-US DPF.
 

15.  Google Maps

The map service Google Maps (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA or in Europe: Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland) is integrated on our website (hereinafter: "Google Maps" or "Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

In addition to the IP address, Google Maps may receive the date and time of access to our site, the Internet address or URL of our site; Google may also process device IDs, cookie information and location information for various purposes. If you are logged in to a Google service, Google may assign this data to your account (we have no control over this).

Information on how Google uses location information can be found at: https://policies.google.com/technologies/location-data#why-use. General information on data protection at Google can be found at: https://policies.google.com/privacy?hl=de.

In addition, so-called Google Fonts (fonts provided by Google) may be loaded when loading Google Maps.

Incognito mode: If you access our website with your iPad, iPhone or Android device, have installed the Google Maps app on your device and have selected incognito mode, some Google Maps services will be deactivated. This may also affect the use of Google Maps on our site.

You can find more information about incognito mode at: https://support.google.com/maps/answer/9430563?co=GENIE.Platform%3DiOS&hl=de&oco=0 (iPhone/iPad) and https://support.google.com/maps/answer/9430563?co=GENIE.Platform%3DAndroid&hl=de (Android).

The legal basis for the integration of Google Maps is Art. 6 para. 1 sentence 1 lit. f GDPR, as it is in our legitimate interest to provide our customers with information on how to reach us and to enable them to plan their route in a simple manner. There is an agreement between us and Google Maps on joint responsibility in accordance with Art. 26 GDPR. You can access this at: https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Note on data transfers to the USA:

Google Maps is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF") exists. Google LLC is certified as a US company under the EU-US DPF.

16. Google Tag Manager

We use the tag management system Google Tag Manager (hereinafter: "Google Tag Manager") on our website, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for all other users.

We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.

Google Tag Manager is a tag management platform that allows us to reload additional tools using a so-called "tag". According to Google's own information, in order to be able to observe the stability, performance and installation quality of the system and to obtain data for diagnosis, certain aggregated data for tag triggering can be collected with Google Tag Manager. According to Google's own statements at https://support.google.com/tagmanager/answer/9323295, this data does not contain IP addresses or measurement IDs that are linked to a specific person. With the exception of the data in standard HTTP request logs, which are all deleted within 14 days of receipt, and the diagnostic data described above, Google Tag Manager does not collect, store or share any information about visitors to our website. This also applies to the URLs of visited pages.

If the tools loaded by Google Tag Manager collect data, Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

The legal basis forthe processing of this data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time by changing the data protection setting on our website via the corresponding icon in the margin of the website.

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection setting on our website.

Note on data transfers to the USA:

Google Tag Manager is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF") exists. Google LLC is certified as a US company under the EU-US DPF.

17. Google Marketing Platform (DoubleClick)

On our website, we integrate the online marketing solution Google Marketing Platform (formerly "DoubleClick"), which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter "Google Marketing Platform"). This tool enables us to place personalized digital advertisements on our website and to analyze their success later. At the same time, this enables us to avoid showing you advertisements again that you have already seen on another page. As part of the Google Marketing Platform, we use the "Google Analytics" and "Google Ads" functions (more on this below).

For this purpose, Google Marketing Platform sets cookies, through which the respective page views can be recorded. Google Marketing Platform sets cookies that store the following information:

• Referrer (previously visited website)
• Your IP-address
• How you use our website
• the number of page views
• Keywords you have used for the searchers

You can find more information about cookies in our cookie information. Before we set the cookies, we obtain your consent (Section 25 (1) TTDSG). The legal basis for subsequent further processing of your data is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

You can withdraw your consent in accordance with the aforementioned legal bases at any time by changing the data protection settings on our website.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your (anonymized) IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://support.google.com/ads/answer/7395996).

You can also prevent the processing of your data by clicking on the following link: https://adssettings.google.com/authenticated?hl=de   

You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=de. 

Note on data transfers to the USA:

Please note the following: The use of Google Marketing Platform is based on a contract that we have concluded with Google Ireland. However, Google Ireland is a subsidiary of the US group Google, so that a transfer of your personal data to the USA cannot be ruled out. The USA is a third country within the meaning of the GDPR for which the EU Commission has issued an adequacy decision (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF.

18. Google Analytics 4

Our website implements the Google Analytics 4 analysis service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: "Google Analytics 4") for all other users. Google's privacy policy can be found at the following link: policies.google.com/privacy;

We have concluded a data processing agreement with Google Ireland Limited in accordance with Art. 28 GDPR.

Google Analytics 4 can record the following information, among others:

• Type of Internet browser used Internet browser version
• the operating system you are using,
• selected language,
• Data on the requesting terminal,
• Referrer (previously visited website),
• Your IP address (according to Google, the IP address is only used temporarily to determine a rough location of the requesting end device (city level) and is then deleted),
• (rough) location data, i.e. city (including its longitude and latitude), continent, country, region and subcontinent of the requesting terminal,
• Date and time of the server request,
• The session duration,
• Clicking and scrolling behaviour including playing media, internal searches, sharing content,
• Web shop interactions, such as product views and orders.

Google Analytics 4 only uses the IP address to derive location data. IP addresses are not otherwise logged or stored, according to Google.

We are only shown statistics via Google Analytics 4, which we use to optimise our website and offers. We have also configured Google Analytics 4 so that Google may not use the data for its own analysis of online trends or to improve its own products and services.

Before we use Google Analytics 4 to analyse your website visit, we obtain your consent to the processing of your personal data (Art. 6 para. 1 sentence 1 lit. a GDPR) and to the setting of the necessary cookies (§ 25 para. 1 TTDSG) that may be associated with Google Analytics 4.

For more information about the cookies we use, please see our cookie information.

The legal basis for the processing of your personal data and the setting of cookies within the scope of Google Analytics 4 is therefore your consent pursuant to Section 25 (1) TTDSG and Article 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection setting on our website.

Note on data transfers to the USA:

Google Analytics 4 is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF") exists. Google LLC is certified as a US company under the EU-US DPF, see https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

You can also prevent the collection of your personal data by Google Analytics 4 and the processing of this data by Google by downloading and installing the browser add-on available under the following link (tools.google.com/dlpage/gaoptout) to deactivate Google Analytics.

You can also prevent the processing of your data within the scope of Google Analytics 4 by clicking on the following link and bringing about an "opt-out": [Bitte den Link setzen - wie dieser Link erzeugt werden kann, wird hier erklärt: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable]. In doing so, an "opt-out cookie" will be set, which will prevent the collection of your user data on this website in the future, unless the opt-out cookie is deleted.

Lastly, you can also prevent Google cookies from being stored directly yourself by making the appropriate settings in your browser settings.

19. Google Ads (Google AdWords)

We use the online advertising program Google Ads (formerly Google AdWords) on our website, which is offered for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

With the help of Google Ads, we can create ads and use them to advertise on the Internet (e.g. as part of Google searches). This allows us to reach potential customers who are searching the Internet for products and services that are comparable to the services offered on our website.

We use Google's "conversion tracking" as part of Google AdWords. By using the conversion tracking analysis service as part of our advertising measures, we receive information about the effectiveness of our advertising campaigns. This is done by evaluating visitor actions. When you click on a Google Ad, a cookie is stored on your device with your consent. This cookie is generated by Google specifically for our website. Each Google Ad customer receives a different cookie, so the cookies cannot be tracked via the websites of Google Ad customers. Both Google and we can assign whether you have interacted with an advertisement and thus reached our website during the storage period of the cookie on your end device when you visit our site. The information collected in this way is used to create conversion statistics for Google Ad customers who have opted for Google conversion tracking. You can object to the use of conversion tracking by deactivating the conversion tracking cookie in your browser under user settings. The purpose of the cookie is to measure the interaction of visitors with advertisements and to avoid frequent repetition of the same advertisement. We only receive statistical evaluations from Google regarding the effectiveness of our advertising measures.

Google Ads cookies are stored with your consent and therefore on the basis of Section 25 (1) TTDSG. The legal basis for the subsequent further processing is also your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

You can withdraw your consent in accordance with the aforementioned legal bases at any time by changing the data protection settings on our website.

You can prevent the storage of cookies directly in your browser settings. However, we would like to point out that you may not be able to make full use of the functions of our website. You can also prevent conversion tracking through browser settings that prevent the setting of cookies from the domain www.googleadservices.com .

In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available at the following link (https://support.google.com/ads/answer/7395996). The use of cookies or device recognition by Google can also be deactivated here: https://adssettings.google.com/anonymous?hl=de   

Detailed information on Google Ads, remarketing and conversion tracking can also be found in Google's privacy policy at: https://www.google.de/policies/privacy/  

Note on data transfers to the USA:

Please note the following: The use of Google Ads is based on a contract that we have concluded with Google Ireland. However, Google Ireland is a subsidiary of the US company Google, so that a transfer of your personal data to the USA cannot be ruled out. The USA is a third country within the meaning of the GDPR for which the EU Commission has issued an adequacy decision (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF.

20. Meta Pixel

On our website, we use the analytics tool Meta Pixel (formerly "Facebook Pixel") from Meta Platforms Inc. or Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland ("Meta"). The Meta Pixel works with a JavaScript code snippet that is executed when someone opens a page. We use it to analyze the effectiveness of our advertising. We cannot identify individual users via our Facebook Business profile or specifically address them with advertising, but only user groups.

We use the Meta Pixel in such a way that the sending of pixel actions to Meta is interrupted until cookie consent has been given. The legal basis for the setting of these cookies and the subsequent further processing of your personal data is your consent (Section 25 (1) TTDSG, Art. 1 (1) sentence 1 lit. a GDPR). You can revoke your consent at any time via the data protection settings on our website.

With the Meta Pixel, we want to ensure that visitors to our website on Facebook are shown advertisements that meet certain characteristics (interest in certain products, gender, certain age, living in a certain city, etc.). Meta calls the grouping of users based on certain characteristics "Custom Audiences". The advertising on Facebook should be shown to potentially interested parties and not to those who are unlikely to be interested in our product. Our Custom Audience therefore consists of the "Website Custom Audiences" function, i.e. the meta pixel matches visitors to our website with people on Facebook so that we can then create a Facebook ad for this target group. This is called "retargeting".

In addition, our custom audience can also consist of "engagement custom audiences" (custom audiences by interaction) in relation to user interactions on Instagram or Facebook. "Engagement" means, for example, that a person has clicked on a video on our Facebook page or that the person has followed our Instagram profile or left a comment there. With Engagement Custom Audiences, we can show ads to these people. While Engagement Custom Audiences are based on actions within the meta technologies, Website Custom Audiences are based on actions that take place on our website and are recorded by the meta pixel. We also use the "Lookalike Audience" function. This allows us to reach new people who are likely to be interested in our company because they are similar to our existing customers.

The pixel also helps us to statistically track the effectiveness of advertisements. This is called Meta "Conversion". The meta pixel tells us whether people in the target group have visited our website, searched for a specific product on our website, looked at a specific product or product category, whether a purchase was initiated, whether a purchase was completed. The meta pixel tells us whether people were directed to our site from a paid search engine result and whether people are interested in special offers. We can only see from the statistics whether or that this has happened - we cannot identify individual persons.

In your Facebook profile, you can choose whether you want to receive personalized advertising. You can object to the collection by the Meta Pixel and the use of your data for Facebook Ads (as part of a Custom Audience). If your browser does not accept third-party cookies, the meta pixel will not be set.

You can find the Facebook data policy here: https://www.facebook.com/policy.php. You can find more information from Meta about the Meta Pixel here: https://www.facebook.com/business/help/651294705016616    

We have concluded a data processing agreement with Meta. You can find out more at https://www.facebook.com/legal/technology_terms, https://www.facebook.com/legal/terms/dataprocessing and https://www.facebook.com/legal/EU_data_transfer_addendum/update  

Note on data transfers to the USA:

The Meta Pixel is used on the basis of a contract that we have concluded with Meta Platforms Ireland. However, Meta Platforms Ireland is a subsidiary of the US group Meta Platforms Inc., which means that your personal data may also be transferred to US Meta group companies (in particular Meta Platforms Inc.) and Meta servers located in the USA. The USA is a third country within the meaning of the GDPR, for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF") exists. Meta Platforms Inc. is certified as a US company under the EU-US DPF.
 

21. TikTok Pixel

On our website, we use the analytics tool TikTok Pixel from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technoogues UK, 4 Lindsey Street, Kaleidoscope, London EC1A 9HP, United Kingdom ("TikTok"). The TikTok pixel is a code that is embedded on our website. The pixel allows us to find new customers, measure and optimize the traffic on our website and the performance of our advertising campaigns.  With the pixel, we can track website visitor actions such as page views or purchases and create audience segments to retarget previous website visitors or create lookalike audiences to find new customers.

We use the TikTok Pixel in such a way that the setting of cookies and sending of pixel actions to TikTok is interrupted until cookie consent has been given. The legal basis for the setting of these cookies and the subsequent further processing of your personal data is your consent (§ 25 para. 1 TTDSG, Art. 1 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time via the data protection settings on our website.

The TikTok Pixel passes on information about when an action is performed on our website, based on the "events" we have set up. "Events" are actions performed on our website, such as adding an item to a shopping cart. The TikTok Pixel shares these events with TikTok to measure campaign performance, optimize ad delivery and build marketing audiences.

The TikTok Pixel collects information that is available via standard web browsers. This includes:

• Ad/event information: Information about the ad a person clicked on TikTok or an event that was triggered.
• Timestamp: Used to determine when website actions took place, such as when a page was viewed or a product was purchased.
• IP address: Used to determine the geographic location of an event.
• User agent: Used to determine the device make, model, operating system and browser information.
• Cookies: Used to support the measurement, optimization and targeting of our campaigns.
• Metadata & Button Clicks: Contains descriptive page metadata, structured microdata, page performance data and button clicks. This information may be used to personalize advertising campaigns for individuals on TikTok and to improve TikTok's ad delivery systems.

You can find TikTok's data protection information here: https://www.tiktok.com/legal/page/eea/privacy-policy/de. You can find more information from TikTok about the TikTok Pixel here: https://ads.tiktok.com/help/article/tiktok-pixel?lang=de     

We have concluded a joint controllership agreement with TikTok in accordance with Art. 26 GDPR. You can find out more at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms. This means that TikTok is primarily responsible for your data subject rights (Art. 15-20 GDPR). If you send us a request regarding the TikTok pixel, we will inform TikTok promptly.

22. Microsoft Advertising (ehemals Bing Ads)

We use the marketing tool "Microsoft Advertising" (formerly "Bing Ads") on our website, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

With the help of this tool, we can place personalized digital advertisements on various search engines (e.g. Bing or Yahoo) and later analyze their success. This is done by displaying our ads to potential customers or visitors to our website who search the Internet for certain search terms (so-called keywords) specified by us.

Microsoft collects various personal data in connection with the aforementioned tool, which Microsoft says it uses to provide Microsoft Advertising, including retargeting and sales where applicable, and for its own purposes. Information on how Microsoft processes this data can be found at https://privacy.microsoft.com/de-de/privacystatement.

A UET tag (Universal Event Tracking) embedded on our website allows us to analyze the behavior of our visitors on our website after they have clicked on one of our ads. Microsoft uses the UET tag to collect various data to analyze our conversion rate. While Microsoft only shows us aggregated data, i.e. statistics (e.g. how many people reached our website via a specific ad, which pages visitors subsequently visited, etc.), Microsoft states that it uses the personal data collected by Microsoft both to provide Microsoft Advertising, including retargeting and completions where applicable, and for its own purposes, such as reporting and performance analysis. Information on how Microsoft processes this data can be found at https://privacy.microsoft.com/de-de/privacystatement.

In connection with the UET tag, we also use the so-called "remarketing" function, with which Microsoft can recognize visits by our visitors. This allows us to reach visitors who have previously visited our website by showing them our ads again in a targeted manner. This means that personal data can also be transmitted to Microsoft after a visit to our website.

You can object to targeting at any time by unsubscribing here https://optout.networkadvertising.org/?c=1 or here https://youradchoices.com/. You can also deactivate the display of interest-based advertising at https://account.microsoft.com/privacy/ad-settings/signedout.

Before we use Microsoft Advertising, we obtain your consent to the processing of your personal data (Art. 6 para. 1 sentence 1 lit. a GDPR) and to the setting of the necessary cookies (§ 25 para. 1 TTDSG). Further information on the cookies used can be found in our cookie information.

The legal basis for the processing of your personal data and the setting of cookies in the context of Microsoft Advertising is therefore your consent in accordance with Section 25 (1) TTDSG and Art. 6 (1) sentence 1 lit. a GDPR.

Note on data transfers to the USA:

The use of Microsoft Advertising is based on a contract that we have concluded with Microsoft Ireland Operations Limited However, Microsoft Ireland Operations Limited is a subsidiary of the US group Microsoft Online, Inc. so that your personal data may also be transferred to US Microsoft group companies (in particular Microsoft Online, Inc.) and Microsoft servers located in the USA.  The USA is a third country within the meaning of the GDPR for which the EU Commission has issued an adequacy decision (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Microsoft is certified as a US company under the EU-US DPF.

You can withdraw your consent in accordance with the aforementioned legal bases at any time by changing the data protection setting on our website.

23. Pinterest Tag

We use the Pinterest Tag of Pinterest Europe Ltd (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") on our website.

The Pinterest tag is a code that we have added to our website. This tag allows Pinterest to track visitors to our website and the actions they take on our website after seeing one of our pins or ads on Pinterest. If a visitor has interacted with one of our pins or Pinterest ads and then signs up for our newsletter, for example, this is referred to as a "conversion". The Pinterest tag allows us to track and optimize these conversions using a cookie set by Pinterest and thus measure the performance of our advertising campaigns and build target groups by recording certain user actions predefined by us (e.g. completed transactions, leads, search queries on the website, product page views). When such an action is carried out, your browser sends an HTTP request to the Pinterest server via the Pinterest tag from the cookie, with which certain information about the action (including type of action, time, browser type of the end device) is transmitted.

Through this transmission, Pinterest can create statistics about the usage behavior on our website after forwarding a Pinterest Pin, which serve us to optimize our offer. However, we do not receive any information with which users can be personally identified.

You can find more information about Pinterest's privacy policy at the following Internet address: https://policy.pinterest.com/de/privacy-policy

We use the Pinterest technologies in such a way that the setting of Pinterest cookies and the sending of pixel actions and information to Pinterest is interrupted until cookie consent has been given. The legal basis for the setting of these cookies and the subsequent further processing of your personal data is your consent (§ 25 para. 1 TTDSG, Art. 1 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time via the data protection settings on our website.

We have concluded a joint controllership agreement with Pinterest in accordance with Art. 26 GDPR. You can find out more at https://business.pinterest.com/de/pinterest-advertising-services-agreement/rest-of-americas/. This means that Pinterest is primarily responsible for your rights as a data subject (Art. 15-21 GDPR). If you send us a request regarding the TikTok pixel, we will inform TikTok promptly.

24. Taboola

This website uses the retargeting technology of Taboola Germany GmbH, AltMoabit 2, 10557 Beriln ("Taboola"). This makes it possible to refer visitors to our website to further own or third-party content in the form of banners based on user behavior, which are likely to correspond to the respective user interest. This content is displayed on the basis of a cookie-based analysis of previous user behavior. For this interest-based content determination, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your surfing behavior and thus adapt the content individually to the stored information.

We have implemented Taboola in such a way that the retargeting function is only activated with your consent (§ 25 para. 1 TTDSG, Art. 1 para. 1 sentence 1 lit. a GDPR). You can withdraw your consent in accordance with the aforementioned legal bases at any time by changing the data protection settings on our website.

You can also permanently object to the setting of cookies for advertising preferences by Taboola by using the option to set an opt-out cookie provided on the following linked page: https://www.taboola.com/privacy-policy#optout

Further information on Taboola's data protection can be found here: https://www.taboola.com/privacy-policy and https://www.taboola.com/policies/media-privacy-addendum

25. Ihre Rechte

If we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: right of access, right of rectification, right to restrict processing, right of erasure, right of information and right to data portability. In addition, you have a right to object, a right of withdrawal and the right to lodge a complaint with a supervisory authority.

Below you will find some details on the individual rights:

25.1  Right of access

You have the right to request confirmation from us as to whether we are processing your personal data. If we process your personal data, you have the right to obtain information in particular about the processing purposes, categories of personal data, recipients or categories of recipients, storage period, if applicable.    

25.2  Right of rectification

You have the right to rectify and/or complete the data we have stored about you if this data is incorrect or incomplete. We will carry out the correction or completion without delay.

25.3  Right to restrict processing

Under certain circumstances, you have the right to request us to restrict the processing of your personal data. An example of this is if you dispute the accuracy of your personal data and we need to verify the accuracy for a certain period of time. For the duration of the verification, your data will only be processed in a restricted manner. Another example of restriction is if we no longer need your data but you need it for litigation.

25.4  Right of erasure

In certain situations, you have the right to demand that we erase your personal data immediately. This is the case, for example, if we no longer need your personal data for the purposes for which we collected the data or if we have processed your data unlawfully. Another example would be if we process your data on the basis of your consent, you withdraw your consent and we do not process the data on any other legal basis. However, your right to erasure does not always exist. For example, we may process your personal data to comply with a legal obligation or because we need it for litigation. 

25.5  Right of information

If you have exercised your right to rectify, erase or restrict the processing of your data, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.

25.6 Right to data portability

You have the right, under certain conditions, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transferred to another controller. This is the case where we process the data either on the basis of your consent or on the basis of a contract with you and that we process the data using automated procedures. You have the right to request that we transfer your personal data directly to another controller, insofar as this is technically feasible and does not affect the freedoms and rights of other persons.

25.7  Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6 (1) sentence 1 lit. e or lit. f GDPR. This also applies to profiling based on these provisions. We will no longer process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is related to direct advertising. If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

25.8  Right of withdrawal

Pursuant to Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time.  The withdrawal of consent does not retroactively invalidate the lawfulness of the processing.

25.9  Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in the Member State of your place of residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

You can find an overview of the respective data protection commissioners of the German federal states as well as their contact details under the following link:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Last updated: April 2024

Cookie Information

We use cookies on our website. Cookies are text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. Cookies are then sent to the server of our website with every server request or page call. A cookie can therefore be used to identify your internet browser when you return to the website. Some of the functions that we have integrated into our website also use web storage objects. These work in a similar way to cookies, but are temporarily stored in your browser and are generally not transmitted to the server.

There are session cookies, which delete themselves when you close the browser, and there are persistent cookies, which are stored on the hard disk until their preset expiry date is reached or until they are actively removed by you. Web storage objects are divided into local storage objects, which never expire, and session storage objects, which are deleted when the browser is closed.

With cookies, a distinction is made between first party cookies (only visible from the domain you are currently visiting) and third party cookies (visible across domains and regularly set by third parties).

Cookies and web storage objects are divided into the following categories:

Technically necessary: these are mandatory in order to navigate the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes nor do they store which web pages you have visited. The legal basis for setting technically necessary cookies and web storage objects is Section 25 para. 2 TTDSG.

Optional: These are used, for example, for analysis and marketing purposes and to display external content such as videos. Analysis cookies and web storage objects collect information about how you use a website, which pages you visit and, for example, whether errors occur during website use. Marketing cookies and web storage objects are used to show you tailored advertising on the website or offers from third parties and to measure the effectiveness of these offers. These are technologies that are not technically necessary. The legal basis for the setting of these cookies and web storage objects is therefore your consent in accordance with § 25 para. 1 TTDSG.

Please note the following: You can ensure yourself that no cookies and similar technologies are stored on your computer at all, or that the storage of only certain cookies is permitted. You can select this in your internet browser settings. You can also view and delete the stored cookies there. If you block all cookies, it is possible that not all functions of our website will be available to you.

Withdrawal and removal options:

As communicated in the introduction to this section, you can enable or restrict the transmission of cookies and similar technologies by changing the settings in your internet browser. You can delete cookies and web storage objects that have already been stored by your internet browser at any time. If cookies and web storage objects are restricted or deactivated for our website, it may not be possible to use all functionalities.