Data Protection

This privacy policy explains to you the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions and content as well as external online presences, such as our Social Media Profile. (hereinafter jointly referred to as "online offer"). With regard to the terms used, such as "personal data" or their "processing", we refer you to the definitions in Art. 4 of the Data Protection Basic Regulation (DSGVO).

Types of data processed

Usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), processing of special categories of data (Art. 9 para. 1 DSGVO): No special categories of data are processed.

Purpose of the processing

Provision of the online offer, its contents and functions Provision of contractual services, service and customer care, marketing, advertising and market research and security measures.

Applicable legal basis

In accordance with Art. 13 DSGVO, we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 letter a and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering enquiries is Art. 6 Para. 1 letter b DSGVO, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. The legal basis for processing to safeguard our legitimate interests is Art. 6 Para. 1 lit. c DSGVO, and the legal basis for processing to safeguard our legitimate interests is Art. 6 Para. 1 lit. f DSGVO.Art. 6 Para. 1 lit. d DSGVO serves as the legal basis in cases where vital interests of the data subject or another natural person require the processing of personal data. Amendments and updates to the Data Protection Declaration. We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the Privacy Policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes make it necessary for you to cooperate (e.g. to give your consent) or any other individual notification.

Security measures

In accordance with Art. 32 DSGVO and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk; these measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling the physical access to the data as well as the access, input, transmission, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure that data subjects' rights are exercised, data is deleted, and we respond to any threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by designing technology and by using data protection-friendly default settings (Art. 25 DSGVO). The security measures include in particular the encrypted transmission of data between your browser and our server. Cooperation with contract processors and third parties If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permit (e.g. to use your personal data for the purpose of processing your order). e.g. if a transfer of the data to third parties, such as to payment service providers, is necessary for the performance of the contract in accordance with Art. 6 Para. 1 letter b DSGVO), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 DSGVO.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

Rights of data subjects

You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information about this data and to receive further information and a copy of the data in accordance with Art. 15 DSGVO. You have accordingly. Art. 16 DPA, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you. In accordance with Art. 17 DSGVO, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with Art. 18 DSGVO, to demand that the processing of the data be restricted. You have the right to demand that the data concerning you which you have made available to us be received in accordance with Art. 20 DSGVO and to demand that it be passed on to other responsible parties. You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO.

Right of withdrawal

You have the right to revoke consents granted in accordance with Art. 7 para. 3 DSGVO with effect for the future.

Right of objection

You can object to the future processing of data concerning you at any time in accordance with Art. 21 DSGVO. The objection may in particular be made against processing for the purposes of direct advertising. We use temporary and permanent cookies, i.e. small files that are stored on the user's device (see last section of this privacy policy for an explanation of the term and function). In some cases, the cookies serve security purposes or are necessary for the operation of our online service (e.g., for the presentation of the website) or to store the user decision when the cookie banner is confirmed. In addition, we or our technology partners use cookies for reach measurement and marketing purposes, about which the users will be informed in the course of the data protection declaration. A general objection to the use of cookies used for online marketing purposes can become the EU site http://www.youronlinechoices.com/erklärt for a large number of services, especially in the case of tracking via the US site http://www.aboutads.info/choices/oder. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used. Deletion of data The data processed by us will be deleted or restricted in their processing in accordance with Art. 17 and 18 DSGVO. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal storage obligations to prevent deletion. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons. Germany:In accordance with legal requirements, data is stored in particular for 6 years in accordance with § 257 Paragraph 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 Paragraph 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). Austria: According to legal requirements, the storage is carried out in particular for 7 years in accordance with § 132 para. 1 BAO (accounting documents, records/invoices, accounts, vouchers, business documents, statement of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years in the case of documents in connection with electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used. Provision of contractual services We process usage data (e.g., the visited websites of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user e.g., product information based on the services they have used so far. Deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, deletion takes place after their expiry (end of commercial (6 years) and tax (10 years) storage obligation); information in the customer account remains until its deletion.

Establishment of contact

When contacting us (via contact form or e-mail), the user's details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. The user's details may be stored in our customer relationship management system ("CRM system") or comparable enquiry organisation. Collection of access data and log files We collect data on the basis of our legitimate interests in the sense of Art. 6 Para. 1 lit. f. DSGVO data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited site), IP address and the requesting provider. For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a maximum of seven days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified. Online presences in social media We maintain online presences on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and inform them about our services. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

Cookies & range measurement

Cookies are information that is transferred from our web server or web servers of third parties to the web browsers of the users and stored there for later retrieval. Cookies can be small files or other types of information storage. We use "session cookies", which are only stored for the duration of your current visit to our online presence (e.g. to enable the storage of your login status or the shopping basket function and thus the use of our online offer at all). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online services and, for example, log out or close the browser. Users will be informed about the use of cookies in the context of pseudonymous range measurement within the scope of this data protection declaration. If the users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer. You can object to the use of cookies that serve to measure reach and advertising purposes via the deactivation page of the network advertising initiative and additionally the US American website or European website.

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transferred to a Google server in the USA and stored there. Google is certified under the Privacy-Shield-Agreement and thus offers a guarantee to comply with the European Data Protection Law. Google will use this information on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the internet. In doing so, pseudonymous user profiles of the users can be created from the processed data. We use Google Analytics in order to display the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined by the websites visited), which we transmit to Google (so-called "remarketing" or "Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our advertisements correspond to the potential interest of the users and do not appear annoying. We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and relating to their use of the online offer to Google and the processing of this data by Google by downloading and installing the available browser plugin. Further information on Google's use of data, setting and objection options can be found on Google's websites ("use of data by Google when you use the websites or apps of our partners"), ("use of data for advertising purposes"), ("manage information that Google uses to show you advertising"). Otherwise, personal data will be anonymized or deleted after a period of 14 months. Facebook, custom audiences and Facebook marketing services Within our online offer, due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee that it complies with European data protection law. On the one hand, the Facebook pixel enables Facebook to determine the visitors of our online offer as a target group for the presentation of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users click.