Privacy Policy
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Florian Gansmeier, Achwaldstraße 4d, 80999 München, Deutschland, Email: hello@aninu.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser bar.
2) Data collection when visiting our website
When using our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
3) Hosting & Content Delivery Network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland ("Shopify") for the purpose of hosting and presenting the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services of Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Kanada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. for further processing on behalf. In the event of the transfer of data to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by the adequacy decision of the European Commission. Further information on data protection at Shopify can be found on the following website: https://www.shopify.de
Further processing on servers other than the aforementioned ones of Shopify only takes place within the framework communicated below.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted again after the browser is closed (so-called "session cookies"); some of these cookies remain on your end device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If individual cookies used by us also process personal data, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the website visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or generally.
Please note that the functionality of our website may be restricted if cookies are not accepted.
5) Contact
5.1 - Shopify Chat
This website uses the live chat system Shopify Chat, a service of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Kanada ("Shopify"), for customer support purposes. To answer live support enquiries, Shopify collects and stores anonymised user data. From this anonymised data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies enable the recognition of the internet browser. To the extent that the information collected in this way has a personal reference, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer support and the statistical analysis of user behaviour for optimisation purposes.
The data collected with the Shopify technologies are not used to personally identify the visitor of this website without the separately given consent of the data subject and are not merged with personal data about the bearer of the pseudonym. To prevent the storage of Shopify cookies, you can set your internet browser so that no further cookies can be placed on your computer in the future or that cookies already placed are deleted. However, switching off all cookies may result in some functions on our internet pages no longer being executable. You can object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time with effect for the future by sending us your objection informally by email to the email address given in the legal notice.
In the event of data transfers to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by the adequacy decision of the European Commission.
5.2 Review reminder by Loox
If you have given us your express consent to do so during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we transmit your email address and, if applicable, other previously collected customer data to the review tool Loox, a service of Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel ("Loox"), so that it sends you a review reminder by email. You can revoke your consent at any time by sending a message to the controller responsible for data processing or to the review platform.
For the transfer of data to Loox in Israel, an adequate level of data protection is guaranteed by the adequacy decision of the European Commission.
We have concluded a data processing agreement with Loox, with which we oblige Loox to protect the data of our customers and not to pass it on to third parties. This contract can be viewed here: https://loox.io
For more information on data protection at Loox, see https://loox.io
5.3 Review reminder by Trusted Shops
If you have given us your express consent to do so during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Köln (www.trustedshops.de), so that it sends you a review reminder by email.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to the review platform.
5.4 When contacting us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and answering your enquiry and only to the extent necessary for this. The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact aims at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations stand in the way.
6) Use of customer data for direct marketing
6.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter to us by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address entered by the internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when you subscribe to the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services to those already purchased from our range. We do not need to obtain separate consent from you for this in accordance with § 7 para. 3 UWG (German Act Against Unfair Competition). Data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, no email will be sent by us. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs at the basic tariffs for this. After receipt of your objection, the use of your email address for advertising purposes will be discontinued without delay.
6.3 - Newsletter dispatch via Klaviyo
Our email newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com
Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
To protect your data in the USA, we have concluded a data processing agreement with Klaviyo, in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.
You can view Klaviyo's data protection regulations here: https://www.klaviyo.com
6.4 Product availability notification by email
For temporarily unavailable items, you can subscribe to receive email product availability notifications. We will send you a one-time email message about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used to be able to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address entered by the internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when subscribing to our email notification service for product availability is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted without delay from the distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.
7) Data processing for order processing
7.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, email address) you provided when ordering in order to personally inform you within the framework of our statutory information obligations in accordance with Art. 6 para. 1 lit. c GDPR by suitable means of communication (e.g. by post or email) about pending updates within the period prescribed by law. Your contact data is used strictly for the intended purpose for notifications about updates owed by us and is processed by us only to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part with the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
7.2 Use of payment service providers (payment services)
- Amazon Pay
When selecting the payment method "Amazon Pay", the payment is processed by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxemburg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this. If cookies, i.e. small text files that are stored on the end device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time via the "cookie consent tool" implemented on the website. You can find further information on the data protection regulations of Amazon Payments at the following internet address: https://pay.amazon.de
- Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Irland, the payment is processed via the "Apple Pay" function of your end device operated with iOS, watchOS or macOS by debiting a payment card stored in "Apple Pay". Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. To approve a payment, the entry of a code previously set by you and verification using the "Face ID" or "Touch ID" function of your end device is therefore required.
For the purpose of payment processing, the information you provided during the ordering process together with the information about your order is passed on to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
Insofar as personal data is processed in the described transmissions, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and information on whether the transaction was completed successfully. The anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".
Further information on data protection at Apple Pay can be found at the following internet address: https://support.apple.com
- Klarna
When selecting a Klarna payment service, the payment is processed via Klarna Bank AB (publ), https://www.klarna.com
https://cdn.klarna.com
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. Klarna uses the information received about the statistical probability of payment default for a balanced decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information is processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for data subjects based in Germany https://cdn.klarna.com
or for data subjects based in Austria https://cdn.klarna.com
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or — if offered — "purchase on account" or "instalment payment" via PayPal, we pass on your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or — if offered — "purchase on account" or "instalment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. Further data protection information, including on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
- SOFORT
When selecting the payment method "SOFORT", the payment is processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 München, Deutschland (hereinafter "SOFORT"), to whom we pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Schweden). Your data is passed on exclusively for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this. You can find further information on the data protection regulations of SOFORT at the following internet address: https://www.klarna.com
- Stripe
If you choose a payment method of the payment service provider Stripe, the payment is processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland, to whom we pass on the information you provided during the ordering process together with the information about your order (name, address, account number, sort code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. You can find further information on data protection at Stripe at the URL https://stripe.com
Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard the legitimate interest in determining the user's solvency. The personal data necessary for a credit check and received as part of the payment processing is, where applicable, transmitted by Stripe to selected credit agencies, which Stripe discloses to users on request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. Stripe uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding on the right to use the chosen payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies.
However, Stripe may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
8) Online marketing
Facebook Pixel for the creation of Custom Audiences with extended data matching (with cookie consent tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the extended data matching mode, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland ("Facebook").
On the basis of his express consent, when a user clicks on an advertisement placed by us on Facebook, an addition is appended to the URL of our linked page by Facebook Pixel. This URL parameter is then written into the user's browser via a cookie set by our linked page itself after redirection. In addition, this cookie collects specific customer data such as the email address that we collect on our website linked to the Facebook ad in processes such as purchases, account registrations or registrations (extended data matching). The cookie is then read out by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook Pixel with extended data matching, Facebook is able, on the one hand, to precisely determine the visitors to our online offering as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with extended data matching to display the Facebook Ads placed by us only to those Facebook users who have shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with extended data matching, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not have a harassing effect. We can also evaluate the effectiveness of the Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called "conversion"). Compared to the standard variant of Facebook Pixel, the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All data transmitted is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Use Policy (https://www.facebook.com
These processing operations are carried out exclusively upon the granting of express consent in accordance with Art. 6 para. 1 lit. a GDPR.
The information generated by Facebook is generally transferred to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
9) Web analytics services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland ("Google"). Google (Universal) Analytics uses so-called "cookies", text files which are stored on your end device and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transferred to a Google server and stored there; this may also involve transmission to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymisation of the IP address by truncation and excludes a direct personal reference. Through the extension, your IP address is truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google LLC. server in the USA and truncated there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website use and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other data from Google.
Google Analytics also enables, via a special function, the so-called "demographic features", the creation of statistics with statements about the age, gender and interests of the website visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information. This allows the definition and differentiation of website user groups for the purpose of target group-optimised orientation of marketing measures. However, data sets recorded via the "demographic features" cannot be assigned to a specific person.
Details on the processing triggered by Google Analytics and on Google's handling of data from websites can be found here: https://policies.google.com
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, with which Google is obliged to protect the data of our website visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com
In connection with this website, the "UserIDs" function is also used as an extension of Google Analytics. By assigning individual UserIDs, we can have cross-device reports created by Google (so-called "cross-device tracking"). This means that your usage behaviour, if you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, can also be analysed across devices if you have set up a personal account by registering on this website and are logged into your personal account with your corresponding login data on different end devices. The data collected in this way shows, among other things, on which end device you first clicked on an advertisement and on which end device the corresponding conversion took place.
9.2 Google Analytics 4
This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), with which the use of websites can be analysed.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your end device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your end device, truncated by the last digits, see below) is generally transmitted to a Google server and stored and processed there. This may also involve the transmission of information to the servers of Google LLC, based in the USA, and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your end device when using the website is, as standard and automatically, only collected and processed in anonymised form, so that a direct personal reference of the collected information is excluded. This automatic anonymisation takes place in that the IP address transmitted by your end device is truncated by the last digits by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities or your usage behaviour and to provide us with further services related to your website use and internet use. The truncated IP address transmitted by your end device as part of Google Analytics 4 is not merged with other data from Google. The data collected as part of the use of Google Analytics 4 is retained for 2 months and then deleted.
Google Analytics 4 also enables, via a special function, the so-called "demographic features", the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information. This makes it possible to determine and differentiate website user groups for the purpose of target group-optimised orientation of marketing measures. However, data collected via the "demographic features" cannot be assigned to a specific person and therefore cannot be assigned to you personally either. The data collected via the "demographic features" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device used by you for using the website, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke any consent given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "cookie consent tool" provided on the website.
In connection with this website, the "UserIDs" function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have cross-device reports created by Google (so-called "cross-device tracking"). This means that your usage behaviour, if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, can also be analysed across devices if you have set up a personal account by registering on this website and are logged into your personal account with your corresponding login data on different end devices. The data collected in this way shows, among other things, on which end device you first clicked on an advertisement and on which end device the corresponding conversion took place.
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European level of data protection even in the case of any transfer of data from the EU or the EEA to the USA and the possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have agreed contractually with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com
10) Retargeting / Remarketing / Referral advertising
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with which we advertise this website in the Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing only takes place if you have agreed with Google that your internet and app browser history will be linked by Google with your Google account and information from your Google account will be used to personalise advertisements that you view on the web. If you are logged into Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Remarketing and on Google's handling of data from websites can be found here: https://policies.google.com
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com
Further information and the data protection regulations regarding advertising and Google can be found here:
https://www.google.com
All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
TikTok Pixel
This website uses the "TikTok Pixel", a tracking technology of the social network "TikTok" of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland ("TikTok").
With the help of cookies (small text files that are stored on the end device used), information about surfing behaviour on our website is collected in pseudonymised form, transmitted to TikTok, stored and analysed there in order to then enable the display of interest-based and personalised product recommendations on TikTok. The subject of the information collected and processed in pseudonymised form is generally the device ID, the device type, time stamps, the operating system used and the IP address. The information may be assigned to the user with the aid of further information that TikTok has stored about the user, e.g. on the basis of ownership of an account on the social network "TikTok". TikTok may also combine the information collected via the pixel with further information that TikTok has collected via other websites and/or in connection with the use of the social network "TikTok", and thus create pseudonymised usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok Pixel also enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an advertisement on TikTok to pages of this website and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is performed, your browser sends an HTTP request via the TikTok Pixel from the cookie to the TikTok server, with which certain information about the action is transmitted. Through this transmission, TikTok can create statistics about usage behaviour on our website after redirection from a TikTok advertisement, which serve us to optimise our offering.
All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, with which TikTok is obliged to protect the data of our website visitors and not to pass it on to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
11) Site functionalities
11.1 - Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This may also involve the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com
11.2 Google reCAPTCHA
On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland ("Google"). This function serves primarily to distinguish whether an entry is made by a natural person or improperly by machine and automated processing. The service includes the sending of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the internet and avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google's privacy policy can be viewed at: https://www.google.com
Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for objecting described above.
12) Rights of the data subject
12.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, with reference to the legal basis cited for the respective conditions of exercise:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to revoke consent given pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
12.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
13) Duration of storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and — if applicable — additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
In the case of the processing of personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject revokes their consent.
If statutory retention periods exist for data processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in continued storage.
In the case of the processing of personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
In the case of the processing of personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information of this declaration on specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.