Privacy policy

––––––––––––––––––––
Privacy Policy
––––––––––––––––––––


1) Information on the collection of personal data and contact details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when you use our website. Personal data means all data by which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Judes Family GmbH, An der Rummel 4, 14806 Bad Belzig Germany, email: hi@judesfamily.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser’s address bar.

2) Data collection when visiting our website
When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data will not be disclosed or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website are processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred for further processing on behalf to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event that data is transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify’s data protection can be found at the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those of Shopify mentioned above takes place only within the scope explained below.

4) Cookies
To make our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can refer to the overview of cookie settings in your web browser to find out the duration of the respective cookie storage.
In some cases, cookies serve to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). Where personal data is also processed by individual cookies we use, processing takes place pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the event that consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
Please note that you can set your browser to inform you about the setting of cookies and to decide individually about their acceptance, or to exclude the acceptance of cookies for certain cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer:

https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us
5.1 When you contact us (e.g. via contact form or email), personal data will be collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5.2 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “business version” of WhatsApp.
If you contact us via WhatsApp on the occasion of a specific business transaction (for example, a purchase order), we will store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name pursuant to Art. 6(1)(b) GDPR to process and respond to your inquiry. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address or email address) in order to assign your inquiry to a specific transaction.
If you use our WhatsApp contact for general inquiries (e.g. about our range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficiently and promptly providing the requested information.
Your data will only be used to respond to your inquiry via WhatsApp. It will not be disclosed to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers the phone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For operating our WhatsApp Business account, we use a mobile device whose address book stores only the WhatsApp contact details of users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts by accepting the WhatsApp Terms of Use when first using the app on their device, pursuant to Art. 6(1)(a) GDPR. The transfer of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.
For information on the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and settings options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6) Online appointment scheduling
Calendly
This website uses the software “Calendly” from the provider Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA, to provide an online appointment booking function.
For the purpose of scheduling appointments, first and last name as well as email address (and, if a telephone appointment is desired, the telephone number) are collected pursuant to Art. 6(1)(b) GDPR and transmitted to Calendly pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer management and efficient appointment scheduling, where they are stored for appointment organization. After the appointment has taken place or after the scheduled appointment period has expired, your data will be deleted by Calendly. We have concluded a data processing agreement (“Data Processing Addendum,” available at https://calendly.com/pages/dpa) with Calendly, in which we obligate Calendly to protect our customers’ data in accordance with legal requirements. Calendly generally transfers collected information outside the European Economic Area and relies on the European Commission’s standard contractual clauses to ensure compliance with the European data protection level.
Details of Calendly’s privacy policy can be found here: https://calendly.com/de/pages/privacy

7) Data processing when opening a customer account and for contract processing
Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of performing a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can have your customer account deleted at any time by sending a message to the above-mentioned address of the controller. We store and use the data you provide to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with consideration of tax and commercial law retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further data use that is permitted by law and about which we inform you in this declaration.

8) Comment function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose will be stored and published on this website. Your IP address will also be logged and stored. This storage of the IP address is carried out for security reasons and in the event that the person concerned infringes the rights of third parties or posts illegal content through a submitted comment. We need your email address to contact you if a third party objects to your published content as unlawful. The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

9) Use of customer data for direct advertising
9.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed to us that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm, by clicking on an appropriate link, that you wish to receive the newsletter in the future.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. When you register for the newsletter, we store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to trace any possible misuse of your email address at a later point in time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After you unsubscribe, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this declaration.
9.2 Dispatch of email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services from our range to those you have already purchased. For this, we do not need to obtain separate consent from you pursuant to Section 7(3) of the German Unfair Competition Act (UWG). Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, no emails will be sent by us. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. You will only incur transmission costs according to the basic rates for this. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
9.3 Newsletter distribution via Klaviyo
The dispatch of our email newsletters is carried out via the technical service provider “Klaviyo,” 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place pursuant to Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system for advertising purposes. Please note that your data is generally transferred to and stored on a Klaviyo server in the USA.
Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with Klaviyo, in which Klaviyo undertakes to protect our users’ data, to process it on our behalf in accordance with its data protection provisions, and, in particular, not to pass it on to third parties.
You can view Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy
9.4 Newsletter distribution via Shopify Email
The dispatch of our email newsletters is carried out via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place pursuant to Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system for advertising purposes. The data you enter for the purpose of receiving the newsletter (e.g. email address) is generally stored on Shopify’s servers in the EU.
As part of the aforementioned Shopify services, data may also be transferred for further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the event of data being transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Shopify uses this information to send and statistically evaluate the newsletters on our behalf. For evaluation purposes, the emails sent may contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also collected (e.g. time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data is used solely for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Shopify may use this data itself pursuant to Art. 6(1)(f) GDPR on the basis of its own legitimate interest in demand-oriented design and optimization of the service as well as for market research purposes, for example, to determine from which countries recipients come. However, Shopify does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
We have concluded a data processing agreement with Shopify obligating Shopify to protect our customers’ data and not to disclose it to third parties.
You can view Shopify’s privacy policy here: https://www.shopify.de/legal/datenschutz
9.5 Product availability notification by email
If, in our online shop, we offer the option for selected, temporarily unavailable items to inform you by email about when they become available, you can subscribe to our email notification service for product availability. If you subscribe to our email notification service for product availability, we will send you a one-time email notifying you of the availability of the item you selected. The only mandatory information for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send this notification. This means that we will only send you the corresponding notification once you have expressly confirmed to us that you agree to receive such a message. We will then send you a confirmation email asking you to confirm by clicking on an appropriate link that you wish to receive such a notification.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. When you register for our email notification service for product availability, we store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to trace any possible misuse of your email address at a later point in time. The data collected by us when you register for our email notification service for product availability will be used exclusively for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the product availability email notification service at any time by sending a corresponding message to the controller mentioned at the beginning. After you unsubscribe, your email address will be deleted immediately from the distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is permitted by law and about which we inform you in this declaration.

10) Data processing for order fulfillment
10.1 - Transmission of image files for order processing by email
On our website, we offer customers the opportunity to commission the personalization of products by transmitting image files by email. The image motif submitted is used as a template for personalizing the selected product.
Via the email address provided on the website, the customer can transmit one or more image files from the storage of the device used to us. We then collect, store, and use the files transmitted in this way exclusively for the creation of the personalized product as per the respective service description on our website. If the transmitted image files are passed on to specialized service providers for the purpose of creating and processing the order, you will be explicitly informed of this in the following paragraphs. No further disclosure takes place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order pursuant to Art. 6(1)(b) GDPR. After final processing of the order, the transmitted image files will be automatically and completely deleted.
10.2 To process your order, we work with the following service providers who support us in whole or in part in the execution of concluded contracts. Personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6(1)(b) GDPR.
10.3 Disclosure of personal data to shipping service providers
- Deutsche Post
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your email address to Deutsche Post prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Deutsche Post pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with Deutsche Post.
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will pass on your email address to DHL prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to DHL pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider DHL.
- DHL Freight
If the goods are delivered by the transport service provider DHL (DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany), we will pass on your email address to DHL prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to DHL pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will pass on your email address and your telephone number to DPD prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to DPD pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider DPD.
- FedEx
If the goods are delivered by the transport service provider FedEx (FedEx Express Germany GmbH, Langer Kornweg 34 k,65451 Kelsterbach), we will pass on your email address and your telephone number to FedEx prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to FedEx pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with FedEx or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider FedEx.
- General Overnight (GO!)
If the goods are delivered by the transport service provider GO! (GO! Express & Logistics (Deutschland) GmbH, Brühler Straße 9, 53119 Bonn), we will pass on your email address to GO! prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to GO! pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with GO! or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider GO!.
- GLS
If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will pass on your email address to GLS prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process.-Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to GLS pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with GLS or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider GLS.
- Hermes
If the goods are delivered by the transport service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will pass on your email address to Hermes prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Hermes pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Hermes or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider Hermes.
- INTEX Paketdienst GmbH
If the goods are delivered by the transport service provider INTEX (INTEX Paketdienst GmbH, In der Held 2, 66620 Nonnweiler-Otzenhausen), we will pass on your email address to INTEX prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to INTEX pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with INTEX or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider INTEX.
- Österreichische Post
If the goods are delivered by the transport service provider Österreichische Post (Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria), we will pass on your email address to Österreichische Post prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Österreichische Post pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Österreichische Post or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider Österreichische Post.
- Overnite
If the goods are delivered by the transport service provider Overnite (Overnite Transport Service GmbH, Oskar-Jäger-Straße 129, 50825 Cologne), we will pass on your email address to Overnite prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Overnite pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Overnite or delivery notification is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider Overnite.
- Post CH
If the goods are delivered by the transport service provider Post CH (Schweizerische PostAG, Schweiz, Wankdorfallee 4, 3030 Bern), we will pass on your email address to Post CH prior to the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process.-Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Post CH. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Post CH or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider Post CH.
- NOX Nachtexpress
If the goods are delivered by “NOX Nachtexpress” via the transport service provider Innight Express Germany GmbH, Katzbergstr. 3, D-40764 Langenfeld (“Innight”), we will pass on your email address and/or (if more effective for coordination) your telephone number to Innight prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Innight pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Innight or the transmission of status information about the shipment delivery is not possible.
Consent may be revoked at any time with effect for the future either with the controller named above or with the transport service provider Innight.
- Schenker
If the goods are delivered by the transport service provider Schenker (Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main), we will pass on your email address to Schenker prior to the delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the name of the recipient and the delivery address to Schenker pursuant to Art. 6(1)(b) GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with Schenker or delivery notification is not possible. Consent may be revoked at any time with effect for the future either with the controller named above or with Schenker.
- TM Logistik
If delivery of the goods is carried out by the shipping service provider TM Logistik (TM Logistik & Services GbR, Rosenheimer Str. 37, 28219 Bremen), we will pass on your email address to TM Logistik prior to delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date and/or providing a delivery notification, provided that you have expressly given your consent to this during the ordering process. Otherwise, for the purpose of delivery pursuant to Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and the delivery address to TM Logistik. Data will be shared only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with TM Logistik and/or a delivery notification is not possible. Consent can be revoked at any time with effect for the future from the controller named above or from TM Logistik.
- TNT
If delivery of the goods is carried out by the shipping service provider TNT (TNT Express GmbH, Haberstraße 2, 53842 Troisdorf), we will pass on your email address to TNT prior to delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date and/or providing a delivery notification, provided that you have expressly given your consent to this during the ordering process. Otherwise, for the purpose of delivery pursuant to Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and the delivery address to TNT. Data will be shared only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with TNT and/or the transmission of status information on shipment delivery is not possible.
Consent can be revoked at any time with effect for the future from the controller named above or from the shipping service provider TNT.
- UPS
If delivery of the goods is carried out by the shipping service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your email address to UPS prior to delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date and/or providing a delivery notification, provided that you have expressly given your consent to this during the ordering process. Otherwise, for the purpose of delivery pursuant to Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and the delivery address to UPS. Data will be shared only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with UPS and/or the transmission of status information on shipment delivery is not possible.
Consent can be revoked at any time with effect for the future from the controller named above or from the shipping service provider UPS.
10.4 Use of payment service providers (payment services)
- Amazon Pay
If you select the payment method “Amazon Pay,” payment is processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: “Amazon Payments”), to whom we pass on the information you provided during the ordering process together with the information about your order pursuant to Art. 6(1)(b) GDPR. Your data will be shared exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find further information on Amazon Payments’ privacy policy at the following web address: https://pay.amazon.com/de/help/201751600
- Apple Pay
If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function of your end device running iOS, watchOS, or macOS by charging a payment card stored with “Apple Pay.” Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorize a payment, you must therefore enter a code you previously set and verify using the “Face ID” or “Touch ID” function of your device.
For the purpose of payment processing, the information you provided during the ordering process together with information about your order is transmitted to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
If personal data is processed in the course of the aforementioned transmissions, processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
If you use Apple Pay on the iPhone or Apple Watch to complete a purchase you made via Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in the settings on your iPhone. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac.”
Further privacy information on Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with an NFC function, by charging a payment card stored with Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment of more than €25 via Google Pay, you must first unlock your mobile device using the verification measure set up (e.g., facial recognition, password, fingerprint, or pattern).
For the purpose of payment processing, the information you provided during the ordering process together with information about your order is transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a one-time transaction number used to verify a completed payment. This transaction number does not contain any information about the actual payment data of your payment method stored with Google Pay, but is created and transmitted as a single-use numeric token. In all transactions via Google Pay, Google acts solely as an intermediary to process the payment. The execution of the transaction takes place exclusively between the user and the originating website by charging the payment method stored with Google Pay.
If personal data is processed in the course of the aforementioned transmissions, processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, the merchant’s location and description, a description of the goods or services purchased provided by the merchant, photos you attached to the transaction, the seller’s and buyer’s or sender’s and recipient’s name and email address, the payment method used, your description of the purpose of the transaction, and, where applicable, the offer associated with the transaction.
According to Google, this processing is carried out solely pursuant to Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of process data, and optimization and maintenance of the Google Pay service’s functionality.
Google also reserves the right to combine the processed transaction data with other information collected and stored when using other Google services.
Google Pay’s terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further privacy information on Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
If you select a Klarna payment service, payment is processed via Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (“Klarna”). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, and IP address) as well as data associated with the order (e.g., invoice amount, items, delivery method) are transmitted to Klarna for the purpose of identity and credit checks, provided you have expressly consented to this pursuant to Art. 6(1)(a) GDPR during the order process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things, but not exclusively. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
You can revoke your consent at any time by notifying the controller responsible for data processing or Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information will be handled in accordance with the applicable data protection regulations and as described in Klarna’s privacy notice for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects residing in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”), as part of payment processing. The transfer is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things, but not exclusively. For further data protection information, including information on the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider “Shopify Payments,” 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you select a payment method offered via the payment service provider Shopify Payments, payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the order process together with information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency, and transaction number) pursuant to Art. 6(1)(b) GDPR. Your data will be shared exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments’ privacy policy can be found at the following web address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
- SOFORT
If you select the “SOFORT” payment method, payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we pass on the information you provided during the order process together with information about your order pursuant to Art. 6(1)(b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will be shared exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information on SOFORT’s privacy policy can be found at the following web address: https://www.klarna.com/sofort/datenschutz.

11) Contact for review reminders
Own review reminder (no dispatch via a customer review system)
We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided that you have expressly consented to this pursuant to Art. 6(1)(a) GDPR during or after your order.
You can revoke your consent at any time by sending a message to the controller responsible for data processing.

12) Use of social media: social plugins
12.1 Instagram as standard plugin
Our website uses so-called social plugins (“plugins”) of the Instagram online service, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera.” An overview of Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted from your browser directly to a server of Facebook Inc. in the USA and stored there.
If you are logged in to Instagram, Instagram can directly assign the visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the “Instagram camera” button, this information is also transmitted directly to a server of Instagram and stored there. The information is also published on your Instagram account and displayed to your contacts there.
The data processing operations described are carried out pursuant to Art. 6(1)(f) GDPR on the basis of Instagram’s legitimate interests in displaying personalized advertising, informing other users of the social network about your activities on our website, and tailoring the Instagram service to needs.
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of Instagram plugins and thus to the data processing operations described above for the future with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/).
For information on the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and settings options to protect your privacy, please refer to Instagram’s privacy notices: https://help.instagram.com/155833707900388/
12.2 Instagram plugin as a Shariff solution
Our website uses so-called social plugins (“plugins”) of the Instagram online service, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only by using an HTML link. This type of integration ensures that when you access a page of our website that contains such buttons, no connection is established yet to Instagram’s servers. If you click the button, a new browser window opens and calls up the page of Instagram, where you can interact with the plugins there (if necessary, after entering your login data).
For information on the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and settings options to protect your privacy, please refer to Instagram’s privacy notices: https://help.instagram.com/155833707900388/

13) Use of social media: videos
Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If playback of embedded YouTube videos is started, “YouTube” uses cookies to collect information about user behavior. According to “YouTube,” these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive activities. If you are logged in to Google and click on a video, your data will be assigned directly to your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular pursuant to Art. 6(1)(f) GDPR on the basis of Google’s legitimate interests in displaying personalized advertising, market research, and/or needs-based design of its website. You have the right to object to the creation of these user profiles, which you must exercise with YouTube. In the course of using YouTube, personal data may also be transferred to the servers of Google LLC in the USA.
Regardless of playback of the embedded videos, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.
Further information on data protection at “YouTube” can be found in the YouTube Terms of Use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy.
Where legally required, we have obtained your consent for the processing of your data described above pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “cookie consent tool” provided on the website.

14) Online marketing
14.1 Facebook Pixel for creating Custom Audiences with advanced matching (without cookie consent tool)
Within our online offering, the so-called “Facebook Pixel” of the Facebook social network is used in the mode of advanced matching, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
Based on the user’s express consent, when a user clicks on a Facebook-served ad placed by us, an additional parameter is appended by Facebook Pixel to the URL of our linked page. This URL parameter is then written into the user’s browser via a cookie upon redirection, which is set by our linked page itself. In addition, this cookie captures specific customer data such as the email address that we collect on our website linked to the Facebook ad in processes such as purchases, account logins, or registrations (advanced matching). The cookie is then read by Facebook Pixel and enables the forwarding of the data, including the specific customer data, to Facebook.
With the help of the Facebook Pixel with advanced matching, Facebook can, on the one hand, precisely determine the visitors to our online offering as a target group for the display of ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel with advanced matching to display the Facebook Ads we place only to those Facebook users who have also shown an interest in our online offering, or who exhibit certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook Pixel with advanced matching, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. In this way, we can further evaluate the effectiveness of Facebook advertising for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). Compared to the standard version of Facebook Pixel, the advanced matching function helps us measure the effectiveness of our advertising campaigns better by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook.
These processing operations are carried out exclusively upon granting of explicit consent pursuant to Art. 6(1)(a) GDPR.
Consent to the use of the Facebook Pixel may only be declared by users who are older than 16 years of age. If you are younger, please ask your legal guardians for permission.
The information generated by Facebook is generally transmitted to a Facebook server and stored there, and it may also be transferred to the servers of Facebook Inc. in the USA. You can revoke your consent at any time by deactivating Facebook Pixel tracking. To do this, you can set an opt-out cookie by clicking the following link, which deactivates Facebook Pixel tracking:
<a href="javascript:void(0)" onclick="if (typeof fbpOptOut == 'function') { fbpOptOut(); } else { alert(atob('QUNIVFVORzogRmVobGVuZGVyIEZhY2Vib29rLVBpeGVsIE9wdE91dC1Db2RlIQ==')); }">Disable Facebook Pixel</a>
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the above link again.
14.2 Use of Google Ads conversion tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites using advertising media (so-called Google AdWords). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, make our website more interesting for you, and achieve a fair calculation of the incurred advertising costs.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that could personally identify users.
Details on the processing initiated by Google Ads conversion tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
If you do not wish to participate in tracking, you can block this use by disabling the Google Conversion Tracking cookie in your internet browser under "user settings". You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
At the following internet address you will find further information about Google’s privacy policy: https://www.google.de/policies/privacy/
You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available, or only to a limited extent, if you have disabled the use of cookies.
Where legally required, we have obtained your consent to the processing of your data described above pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke the consent you have given at any time with effect for the future. To exercise your revocation, deactivate this service in the "cookie consent tool" provided on the website or alternatively follow the option to object described above.

15) Web analytics services
15.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transmitted to a Google server and stored there; this may also involve a transfer to servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and excludes any direct personal reference. By means of this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet usage. The IP address transmitted by your browser within the scope of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables, via a special function called "demographic characteristics", the creation of statistics with statements about age, gender and interests of site visitors based on an evaluation of interest-based advertising and by incorporating third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, the datasets recorded via the "demographic characteristics" cannot be assigned to any specific person.
Details on the processing initiated by Google Analytics and on Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All of the processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke the consent you have given at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on the so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
15.2 Hotjar (Hotjar Ltd.)
This website uses the web analytics service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
This tool allows movements on the websites on which Hotjar is used to be traced (so-called heatmaps). For example, it can be seen how far users scroll and which buttons users click and how often. The tool also makes it possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests for optimization and marketing purposes and the user-oriented design of our website pursuant to Art. 6 para. 1 lit. f GDPR. When using this tool, we pay particular attention to the protection of your personal data. For example, we can only track which buttons you click and how far you scroll. Areas of the websites where personal data from you or third parties are displayed are automatically hidden by Hotjar and are therefore never visible.
Hotjar offers every user the option to prevent the use of the Hotjar tool by means of a "Do Not Track header", so that no data about the visit to the respective website is recorded. This is a setting supported by all common browsers in their current versions. For this purpose, your browser sends a request to Hotjar indicating that tracking of the respective user should be disabled. If you use our website with different browsers/computers, you must set the "Do Not Track header" separately for each of these browsers/computers.
You can find detailed instructions with information for your browser at: https://www.hotjar.com/opt-out
Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy
Where legally required, we have obtained your consent to the processing of your data described above pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke the consent you have given at any time with effect for the future. To exercise your revocation, please follow the option to object described above.

16) Retargeting/ Remarketing/ Referral advertising
Google Ads Remarketing
Our website uses the features of Google Ads Remarketing, through which we advertise for this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in your browser which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is based on our legitimate interest in the optimal marketing of our website pursuant to Art. 6 para. 1 lit. f GDPR.
Further data processing only takes place if you have agreed with Google that your web and app browsing history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you view on the web. If, in this case, you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form audiences. The use of Google Ads Remarketing may also involve the transfer of personal data to the servers of Google LLC in the USA.
Details on the processing initiated by Google Ads Remarketing and on Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in available via the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be viewed here:
https://www.google.com/policies/technologies/ads/
Where legally required, we have obtained your consent to the processing of your data described above pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke the consent you have given at any time with effect for the future. To exercise your revocation, deactivate this service in the "cookie consent tool" provided on the website or alternatively follow the option to object described above.

17) Tools and miscellaneous
- Adobe Fonts (Typekit)
This site uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you use must connect to Adobe’s servers. This may also involve the transfer of personal data to Adobe’s servers in the USA. In this way, Adobe becomes aware that our website was accessed via your IP address. The use of Adobe Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Adobe Fonts can be found at https://fonts.adobe.com/ and in Adobe’s privacy policy: https://www.adobe.com/de/privacy.html
- FontAwesome
This site uses so-called web fonts from "FontAwesome", a service of Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA ("FontAwesome"), for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you use must connect to the servers of FontAwesome. This may also involve the transfer of personal data to the servers of FontAwesome in the USA. In this way, FontAwesome becomes aware that our website was accessed via your IP address. The use of FontAwesome fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about FontAwesome can be found at: https://fontawesome.com/privacy
- Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google’s servers. This may also involve the transfer of personal data to the servers of Google LLC in the USA. In this way, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
- Monotype Web Fonts
This site uses so-called web fonts provided by Monotype Imaging Holdings Inc., a Delaware corporation with its principal offices at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.
For this purpose, the browser you use must connect to the servers of Monotype. In this way, Monotype becomes aware that our website was accessed via your IP address. The use of Monotype Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Monotype Web Fonts can be found at https://www.fonts.com/info/legal and in Monotype’s privacy policy: https://www.fonts.com/info/legal/privacy
- MyFonts
This site uses the internet-based web design offering from MyFonts of Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA, for the customization and graphic design of texts and backgrounds (fonts). When you call up a page, your browser loads the required fonts into its browser cache to display texts and fonts correctly.
Because MyFonts’ claim to remuneration for providing the fonts is calculated on the basis of the individual access volume of the website, we use a tracking pixel, i.e., a one-pixel image file, which is stored on our website. This pixel enables the measurement of access numbers and counts page visits.
Insofar as personal data is processed in the processing activity described, this is done pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining access numbers to properly determine MyFonts’ claim to remuneration.
Further information on MyFonts’ data protection can be found at: https://www.monotype.com/legal/privacy-policy/

18) Rights of the data subject
18.1 The applicable data protection law grants you, with regard to the processing of your personal data by the controller, comprehensive data subject rights (rights of access and intervention), about which we inform you below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of what guarantees exist pursuant to Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not exist in particular if processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction of the processing of your personal data for as long as the accuracy of your data contested by you is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data once the purpose has been achieved, or if you have objected on grounds relating to your particular situation, for as long as it has not yet been determined whether our legitimate grounds prevail;
- Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about those recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible;
- Right to withdraw consent given pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw consent to the processing of data once given at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected by the withdrawal;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement.
18.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

19) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
In the case of processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject revokes their consent.
If there are statutory retention periods for data which are processed within the scope of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or initiation of a contract and/or we have no legitimate interest in further storage.
In the case of processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
In the case of processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise derived from the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

20) We use Microsoft Clarity, a web analytics software, on our website. This is provided by Microsoft Corporation, located at One Microsoft Way, Redmond, WA 98052-6399, USA. In this context, Microsoft may also process some of your data in the USA. Please note that, according to the European Court of Justice, there is currently no adequate level of data protection for data transfers to the USA, which entails various risks for the lawfulness and security of data processing.
When processing data in third countries (outside the European Union, Iceland, Liechtenstein, Norway – particularly in the USA) or when transferring data to such countries, Microsoft uses so-called standard contractual clauses pursuant to Article 46, paragraphs 2 and 3 of the GDPR. These standard contractual clauses (SCC) are model clauses provided by the EU Commission and are intended to ensure an adequate level of data protection in accordance with European standards, even if your data is transmitted to and stored in third countries. Through these clauses, Microsoft undertakes to comply with the European level of data protection, even if your relevant data is stored, processed and managed in the USA.
You can view the decision of the EU Commission and the corresponding standard contractual clauses here .
Further information about the data processed by Microsoft can be found in Microsoft’s privacy policy, which you can find here .
Please note that the use of Microsoft Clarity and the associated data processing is based on your consent, and you have the right to withdraw this consent at any time.