Privacy Policy – Carp-Sounder

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is Carpsounder Braunfels e.K., Owner: Joachim Flauger, Josef-Lücker-Weg 6, 35619 Braunfels, Germany, Tel.: 064425152, E-Mail: info@carp-sounder.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of page content, we use a provider who performs its services either itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers, unless different data recipients are specified below for specific data processing operations.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of a given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

5.1 – OpenAI

On this website, we have integrated an artificial intelligence software solution from the following provider for autonomous customer support: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

Data may also be transferred to: OpenAI OpCo, LLC, USA

Via an API-based integration, visitors can submit inquiries about offers, website functionalities, placed orders, and the exercise of contractual rights by text input, which are then answered and processed by the provider’s language models.

For this purpose, the provider’s software may collect personal data of the inquirer to match it with the order history, assign the input to a specific order, automatically check the request, and then lead it to a solution by autonomously initiating processing procedures.

The collection and further processing of personal data is carried out exclusively for the purpose of processing the specific request. The processing of site visitors’ inputs for the purpose of training and further development of the provider’s AI language models is expressly prevented.

Data processing is carried out on the basis of our legitimate interest in the effective support of our site visitors, the optimal marketing of our offer, and the automation of customer support to relieve operational burden, in accordance with Art. 6 para. 1 lit. f GDPR.

Collected personal data will be deleted, subject to any conflicting statutory retention periods, when the provider’s software determines a final clarification of the matter according to automatic mathematical-statistical procedures.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

5.2 – OpenAI

Data may also be transferred to: OpenAI OpCo, LLC, USA

Via an API-based integration, visitors can communicate preferences by text input, which are then processed by the provider’s language models to determine product recommendations tailored to their interests.

For this purpose, the provider’s software may collect personal data of the inquirer to automatically check the request and then lead it to a solution by autonomously initiating processing procedures.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

5.3 WhatsApp Business

You have the option to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. For this purpose, we use the so-called “Business Version” of WhatsApp.

If you contact us via WhatsApp regarding a specific transaction (e.g., a placed order), we store and use your mobile phone number used on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b GDPR to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your inquiry to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we store and use your mobile phone number used on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.

Your data will always only be used to answer your inquiry via WhatsApp. No disclosure to third parties takes place.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR by accepting the WhatsApp terms of use when first using the app on their device. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and setting options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects our site visitors’ data and prohibits disclosure to third parties.

Within the scope of the processing operations mentioned above, data transfers to Meta Platforms Inc. servers in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.4 When contacting us (e.g., via contact form or email), personal data is processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations conflict with this.

6) Comment Function

When using the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the data subject violates the rights of third parties or posts illegal content through a submitted comment. We require your email address to contact you if a third party objects to your published content as illegal.

The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

7) Data Processing When Opening a Customer Account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods conflict with this, and no legitimate interest on our part in further storage persists.

8) Use of Customer Data for Direct Marketing

8.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. For newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive newsletters by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us during newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After successful unsubscription, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further use your email address for advertising purposes, which is legally permitted and about which we inform you in this declaration.

After unsubscribing from the newsletter, your email address may be stored in a so-called blacklist and compared with recipient lists of future newsletters from there, to technically prevent renewed sending of newsletters requiring consent. This processing is carried out on the basis of our legitimate interest in avoiding unwanted advertising mailings in accordance with Art. 6 para. 1 lit. f GDPR.

8.2 MailPoet

Our email newsletters are sent via this provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on your data provided during newsletter registration in accordance with Art. 6 para. 1 lit. f GDPR to this provider so that they can handle the newsletter dispatch on our behalf.

Subject to your express consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects our site visitors’ data and prohibits disclosure to third parties.

9) Data Processing for Order Fulfillment

9.1 Insofar as necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to inform you personally within the scope of our legal information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communicating updates owed by us and will only be processed by us to the extent necessary for the respective information.

9.2 Disclosure of Personal Data to Shipping Service Providers

– Deutsche Post

We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We pass on your email address and/or telephone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR, we only pass on the recipient’s name and delivery address to the provider. The transfer only takes place insofar as it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent can be revoked at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
– DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.
– DHL Express

We use the following provider as a transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the provider.

9.3 Use of Payment Service Providers

– Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function of your iOS, watchOS, or macOS device by debiting a payment card stored in “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must enter a previously set code and verify it using your device’s “Face ID” or “Touch ID” function.

For the purpose of payment processing, your information provided during the order process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment execution. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm successful payment.

If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes personal identification. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, the Mac and the authorization device communicate over an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.

Further information on data protection at Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
– Bancontact

One or more online payment methods from the following provider are available on this website: Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, the transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
– EPS Transfer

One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria

If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing is carried out via the payment method stored in your Google account.
To authorize a payment via Google Pay on a desktop, you must first log in to your Google account; to authorize it on a mobile device, you must complete the corresponding verification procedure (e.g., by facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, your information provided during the order process, along with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the originating website, with which a successful payment is verified. This transaction number contains no information about the real payment data of your payment method stored in Google Pay, but is created and transmitted as a uniquely valid numerical token. For all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.

If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction, and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
– iDeal

One or more online payment methods from the following provider are available on this website: Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data for an alternative payment method) during the ordering process.

To protect our legitimate interest in determining the creditworthiness of our customers, this data is forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you selected can be granted with regard to payment and/or default risks.

In addition to internal provider criteria, identity and creditworthiness information from the following credit agencies may be included in the decision-making process for the application review in accordance with Art. 6 para. 1 lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0&ldl=de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
– Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance, your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, the transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data for an alternative payment method) during the ordering process.

To protect our legitimate interest in determining your creditworthiness in such cases, this data is forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you selected can be granted with regard to payment and/or default risks.

This website uses PayPal Checkout, an online payment system from PayPal that consists of PayPal’s own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – “Pay Later” via PayPal, we transmit your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.

For payment methods credit card via PayPal, direct debit via PayPal, or – if offered – “Pay Later” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If the PayPal payment method “Invoice Purchase” is available and selected, your payment data will first be transmitted to PayPal for payment preparation, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) for payment execution. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, RatePay carries out an identity and creditworthiness check on its own behalf to determine creditworthiness according to the principle already mentioned above and transmits your payment data to credit agencies based on the legitimate interest in determining creditworthiness in accordance with Art. 6 para. 1 lit. f GDPR. A list of credit agencies that Ratepay can use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data will first be transmitted to PayPal for payment preparation in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider for payment execution in accordance with Art. 6 para. 1 lit. b GDPR:

– Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
– Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
– iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
– Bancontact (Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium)
– Blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
– EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
– MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
– Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further data protection information can be found in PayPal’s privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
– Sofortüberweisung

One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

If you select a payment method from the provider, your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, the transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
– Trustly

One or more online payment methods from the following provider are available on this website: Trustly Group AB, Rådmansgatan 40, 113 57 Stockholm, Sweden

If you select a payment method from the provider where you pay in advance (e.g., bank transfer), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, the transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

9.4 We reserve the right to pass on your data to the debt collection service provider FOMA Gesellschaft für Forderungsmanagement mbH – Eiffestr. 76, 20537 Hamburg, insofar as our payment claim has not been settled despite a prior reminder. In this case, the claim will be collected directly by the debt collection service provider.

The transfer of your data serves contract performance pursuant to Art. 6(1) sentence 1 lit. b GDPR as well as the safeguarding of our legitimate interests, which prevail within the framework of a balancing of interests, in the effective assertion and/or enforcement of our payment claim pursuant to Art. 6(1) sentence 1 lit. f GDPR.

9.5 Electronic cancellation function for distance selling contracts

Consumers who enter into contracts on this website for which a statutory right of cancellation exists have the option of declaring the cancellation via an electronic cancellation function in accordance with the applicable cancellation provisions.

When using the cancellation function, in addition to information to identify the contract to be cancelled, further personal information such as the consumer’s first and last name and email address must be provided or confirmed.

The collection of this information and its transmission to us takes place pursuant to Art. 6(1) lit. b GDPR and only insofar as it is necessary for the proper processing of the cancellation. Also on the basis of Art. 6(1) lit. b GDPR, the personal data provided is used to confirm receipt of the cancellation declaration by email. A further legal basis for the processing is Art. 6(1) lit. c GDPR. We are legally obliged to provide an electronic cancellation function for paid consumer distance selling contracts.

10) Web analytics services

Jetpack

This website uses the web analytics service of the following provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized user profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct personal identification. Data is not merged with other data collected about you in a personally identifiable form.

All processing described above, in particular the reading or storage of information on the device used, is only carried out if you have given us your express consent pursuant to Art. 6(1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

11) Retargeting/Remarketing and conversion tracking

Meta Pixel

Within our online offer, we use the “Meta Pixel” service from the following provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”)

If a user clicks on an ad placed by us on Facebook and/or Instagram, “Meta Pixel” is used to add a parameter to the URL of our linked page. This URL parameter is then entered into the user’s browser after the redirect via a cookie that our linked page itself sets.

This enables Meta, on the one hand, to determine the visitors to our online offer as a target group for the display of ads (so-called “Ads”). Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to users who have also shown an interest in our online offer or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called “Custom Audiences”).

On the other hand, the “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an ad and what actions they take there (so-called “conversion tracking”).

In addition to the “Meta Pixel”, which transmits data about your browser to Meta, the “Meta Conversions API” may also be used. If it is used, information about certain actions on our website (so-called “events”, e.g., page views, adding products to the shopping cart, initiating the ordering process, or completing an order) is transmitted not via your browser but directly from our server to Meta’s servers via an interface. This serves to make the measurement of the success of our ads more reliable, for example if browser-side transmission does not take place or only incompletely due to technical limitations. Within the framework of the “Meta Conversions API”, the following data in particular may be transmitted to Meta: type and time of the event, URL accessed, information about ordered products and their value, your IP address, information about your browser and device (user agent), and the identifiers stored in the Meta cookies. To avoid duplicate collection of the same information by “Meta Pixel” and “Meta Conversions API” in these cases, each event is assigned an identifier that Meta uses to merge the transmissions.

The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent pursuant to Art. 6(1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We and Meta are jointly responsible for the collection of data via “Meta Pixel” and its transmission to Meta (Art. 26 GDPR). For this purpose, we have concluded an agreement with Meta on joint responsibility, the content of which you can access at https://www.facebook.com/legal/controller_addendum.

For the evaluation of the data, its assignment to predefined events, and the creation of measurement and analysis reports, Meta acts as our processor pursuant to Art. 28 GDPR and, under the data processing agreement at https://facebook.com/legal/terms/dataprocessing, is obliged to protect the data of our website visitors and customers.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, it may also be transmitted to servers of Meta Platforms Inc. in the USA.

12) Page functionalities

12.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC., USA

If you access a page on our website that contains such a plugin, your browser will establish a direct connection to the provider’s servers at the latest at the time the video is played in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not want your data to be assigned to your account, you must log out before clicking the play button.

All of the processing mentioned above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent pursuant to Art. 6(1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

12.2 – Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

For the visual design of the captcha window, “Google Fonts”, i.e., fonts loaded from the internet by Google, are used. No processing of information beyond what is already transmitted to Google via the functionality of reCAPTCHA, as mentioned above, takes place.

The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider’s servers for evaluation. Cookies may be used in this process, i.e., small text files that are stored in the device’s browser.

If the processing described above is carried out on the basis of cookies, these are only set if you have given us your express consent pursuant to Art. 6(1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual personal responsibility on the internet and preventing misuse and spam pursuant to Art. 6(1) lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

13) Tools and miscellaneous

13.1 Lexware Office

We use the service of the cloud-based accounting software from the following provider to handle our accounting: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany

The provider processes incoming and outgoing invoices and, if applicable, also our company’s bank transactions in order to automatically capture invoices, match them to transactions, and create financial accounting in a partially automated process.

If personal data is also processed in this context, the processing is based on our legitimate interest in an efficient organization and documentation of our business transactions pursuant to Art. 6(1) lit. f GDPR.

13.2 Cookie consent tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies requiring consent and cookie-based applications. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking a checkbox. In this process, all cookies/services requiring consent are only loaded through the use of the tool if the respective user gives the corresponding consent by ticking the checkbox. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6(1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is also Art. 6(1) lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

14) Rights of the data subject

14.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to revoke granted consents pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

15) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data on the basis of express consent pursuant to Art. 6(1) lit. a GDPR, the data concerned will be stored until you revoke your consent.

If statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6(1) lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, provided it is no longer required for contract performance or contract initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6(1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6(1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 2026-10-26, 06:13:40

1) Introduction and Contact Details of the Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contacting Us

6) Comment Function

7) Data Processing When Opening a Customer Account

8) Use of Customer Data for Direct Marketing

9) Data Processing for Order Fulfillment

10) Web analytics services

11) Retargeting/Remarketing and conversion tracking

12) Page functionalities

13) Tools and miscellaneous

14) Rights of the data subject

15) Duration of storage of personal data

Login

Register