Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided for the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website as well as improving our services.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Contact
Controller
Feel free to contact us. The controller responsible for data processing is: Marcel Walter, Vinhovenweg 28, 41564 Kaarst Germany, +49 (0)2131 / 2019077, info@onehome.de
Customer-initiated contact by email
If you initiate business contact with us via email, we only collect your personal data (name, email address, message text) to the extent provided by you. The purpose of data processing is to handle and respond to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation regarding interest in a purchase, preparation of a quote) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. Data processing serves the purpose of contacting us.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation regarding interest in a purchase, preparation of a quote) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Use of address validation by Endereco
We use address validation on our website provided by Endereco UG (limited liability) (Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany; “Endereco”).
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors, and supplementing missing data if necessary. If data is entered incorrectly, alternative suggestions for correction are displayed.
Among others, the following information may be transmitted to Endereco and processed there: postal addresses (country, city, zip code, street, house number), email address, telephone number.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a correct data basis for the fulfillment of our contractual obligations. You have the right, for reasons arising from your particular situation, to object to this processing of personal data concerning you at any time.
The data is processed separately by the provider and not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
Further information on data protection at Endereco can be found at: https://www.endereco.de/datenschutzerklaerung/.
We use address validation on our website provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland “Google”).
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors, and supplementing missing data if necessary. If data is entered incorrectly, alternative suggestions for correction are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and analyzed.
Among others, the following information may be transmitted to Google and processed there: postal addresses (country, city, zip code, street, house number), email address, telephone number.
Your data may also be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a correct data basis for the fulfillment of our contractual obligations. You have the right, for reasons arising from your particular situation, to object to this processing of personal data concerning you at any time.
The data is processed separately by the provider and not merged with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
Further information on terms of use and data protection at Google can be found at https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.
Customer account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will subsequently be deleted.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Reviews Advertising
Data collection when writing a comment or a review
When commenting on/reviewing an article or a post, we only collect your personal data (name, email address, comment text) to the extent provided by you. Processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews.
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your personal data will subsequently be deleted.
When your comment/review is published, only the name you provided will be published.
Trustami customer review
The Trustami trust seal is integrated on this website to display collected reviews and social media feedback. This serves our legitimate interests in optimally marketing our offering on our own website in accordance with Art. 6(1)(1)(f) GDPR. When calling up the Trustami trust seal, the web server automatically saves data (access data) in the form of a server log file, which contains the name of the retrieved website, the file, the date and time of the retrieval, your IP address in abbreviated form, the volume of data transferred, the notification of a successful retrieval, the browser type, the user's operating system, the referrer URL (the previously visited page), and the requesting provider. This access data is not analyzed and is automatically overwritten no later than seven days after the end of your site visit. The Trustami trust seal and the services advertised with it are an offer from Trustami GmbH, Schröderstraße 5, 10115 Berlin. For the processing of data collected by Trustami, the privacy policy of Trustami applies at www.trustami.com/datenschutz.
Website logo for Google customer reviews
The website logo for Google customer reviews by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) is integrated on our website.
The integration serves the purpose of displaying the number and result of our reviews received via Google so far and advertising participation in this program.
To display the logo on our website and show you personalized advertisements on Google, Google uses cookies. Your IP address, among other things, may be processed and transmitted to Google.
Your data may also be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed itself to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25(1)(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6(1)(a) GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Further information on terms of use and data protection when using Google customer reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://www.google.com/privacy?hl=de
After your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, email address, order information) independently of contract processing to send you a review reminder by email after an order has been placed, provided you have expressly consented to this.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Use of e-mail address for sending newsletters
We use your e-mail address to send you information and offers via newsletter, provided you have expressly consented to this. Data processing is exclusively for the purpose of promotional contact. For this purpose, we process your e-mail address as well as any other data that you have voluntarily provided when registering for our newsletter.
Processing is based on Art. 6 (1) (a) GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your e-mail address on a so-called blacklist to prevent you from receiving newsletters from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the renewed use of your e-mail address for sending our newsletters. You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.
We offer an item availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your e-mail address on the respective item page to be informed by us via e-mail when it becomes available, provided you have consented to this. You will receive a one-time e-mail notification regarding the availability of the respective item. Processing is based on Art. 6 (1) (a) GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its revocation. You can unsubscribe from the availability notification at any time by notifying us. Your e-mail address will subsequently be removed from the distribution list.
Shipping Service Providers Warehouse Management
Passing on e-mail addresses to shipping companies for information on shipping status
We pass your e-mail address on to the transport company as part of contract fulfillment, provided you have expressly consented to this during the ordering process. This transfer is for the purpose of informing you of your shipping status via e-mail. Processing is based on Art. 6 (1) (a) GDPR with your consent. You may revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out based on the consent before its revocation.
Use of an external warehouse management system
We use a warehouse management system for contract fulfillment as part of order processing. For this purpose, your personal data collected during the order process is transmitted to
plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 (1) (b) GDPR.
Payment service providers
Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via this payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service PayPal Express. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. The cookies allow your browser to be recognized.
The processing of your personal data is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in offering a customer-oriented selection of various payment methods. You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the payment service PayPal Express can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of Shopify Payments
We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves the purpose of being able to offer you payment via the payment service Shopify Payments. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, which incorporate address data, among other things. Your interests worthy of protection are taken into account in accordance with legal provisions. Data processing serves the purpose of a credit check for contract initiation. This processing is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in protection against payment default if Stripe provides advance performance.
You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR by notifying Stripe. The provision of data is required for the conclusion of the contract with your desired payment method. Failure to provide it will result in the contract not being concluded with your chosen payment method.
Further information on data processing when using the payment service Shopify Payments can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing during payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool allows you to grant consent for data processing via the website, in particular the setting of cookies, and to exercise your right of withdrawal for consent already granted. Data processing serves the purpose of obtaining and documenting required consents for data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transmitted to and processed in third countries outside the EU, in particular to Canada and the USA. There is an adequacy decision from the EU Commission for Canada. For the USA, there is an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Data processing takes place to fulfill a legal obligation based on Art. 6 (1) (c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz.
Analysis Advertising tracking
Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.
The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser you use and the device you use, pages visited, referrer URL (website via which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
Your IP address is shortened by us beforehand on our own servers. Google therefore receives only pseudonymized data.
Google uses technologies such as cookies, browser web storage, and tracking pixels that allow an analysis of your use of the website. The use of cookies or comparable technologies occurs with your consent based on § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR.
The processing of your personal data takes place with your consent based on Art. 6 (1) (a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its revocation.
We use the advanced implementation of Consent Mode. In this process, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain the following information, among others: IP address for deriving the IP country (the IP address is not logged), date and time of the page visit, URL of the pages visited, user agent, referrer URL (website through which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data in order to carry out comprehensive usage analysis despite the refusal of consent.
The information generated in this way about your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify Statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of commissioned data processing. Shopify is a company affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. When you navigate the website, information about visited web pages or products, the referrer URL (the website through which you accessed our website), and information about how you interact with the website are also recorded. Technologies such as cookies as well as web beacons, tags, and pixels (electronic files used to record information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
You can find more information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, contain no personal data, and are therefore not used for personal identification. When you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked via the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. We use the advanced implementation of Consent Mode. In this process, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain the following information, among others: IP address for deriving the IP country (the IP address is not logged), date and time of the page visit, URL of the pages visited, user agent, referrer URL (website through which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data in order to carry out comprehensive usage analysis despite the refusal of consent.
Your data may be transmitted to the servers of Google LLC in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
We use the remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves the purpose of analyzing visitor behavior and visitor interests. To carry out the analysis of website usage, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies are used to record visits to the website as well as anonymized data about the use of the website. No personal data of the website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that most likely take into account product and information areas you previously accessed.
Your data may be transmitted to servers of Google LLC in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Further information on Google Remarketing as well as the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Use of Microsoft Advertising
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.
The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. However, it is not possible to personally identify these users. Microsoft Advertising uses technologies such as cookies and tracking pixels that enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is placed on your computer. This cookie has a limited validity and is not used for personal identification. When you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to this page. The following information may be collected, among others: IP address, identifiers (markers) assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (website through which you accessed our website), URL of our website.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Further information on data protection and the cookies used by Microsoft can be found here.
Use of TikTok Pixel
We use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”) on our website. Both companies are the joint controllers for data processing (hereinafter “TikTok”).
The data processing serves the purpose of identifying and analyzing our customers' website access and for better customer targeting by placing targeted advertisements and evaluating the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels, which enable your browser to be recognized. The following information, among others, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, it is not possible to personally identify users.
Your data may be transferred to third countries, such as the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transfer to the USA as well as to third countries without an adequacy decision is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.
Plug-ins and other
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags, which are used in particular to implement tracking and analysis tools. Data processing serves the purpose of designing and optimizing our website to meet needs.
The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of other tags, which may collect and process personal data.
More information on terms of use and data protection can be found here.
Use of Google reCAPTCHA
We use the reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of data processing on our behalf. The query serves the purpose of distinguishing whether input is provided by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, your IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, if applicable, also transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Use of Google Maps
We use the Google Maps embedding feature from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The feature enables the visual display of geographical information and interactive maps. When accessing pages where Google Maps is embedded, Google also collects, processes, and uses data from website visitors.
Your data may also be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option to change your settings in the privacy center so that you can manage and protect your data processed by Google.
Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to embed videos from the “Vimeo” portal.
When you visit pages of our website equipped with such a plug-in, a connection to the Vimeo servers is established and the plug-in is displayed on the page by notifying your browser. This transmits both your IP address and information about which of our pages you have visited to the Vimeo servers.
If you are logged into Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in features (e.g., by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) sentence 1 of the TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
Further information on the purpose and scope of the collection as well as the further use and processing of data by Vimeo, and your rights and options for protecting your privacy, can be found in Vimeo’s privacy policy: https://vimeo.com/privacy
Data Subject Rights and Retention Period
Retention Period
After complete contract fulfillment, the data is initially stored for the duration of the warranty period, then in accordance with statutory, particularly tax and commercial law retention requirements, and then deleted after the period expires, unless you have consented to further processing and use.
Rights of the Data Subject
Provided the legal requirements are met, you have the following rights under Art. 15 to 20 of the GDPR: Right to information, to rectification, to erasure, to restriction of processing, and to data portability.
Furthermore, under Art. 21 (1) of the GDPR, you have the right to object to processing based on Art. 6 (1) lit. f of the GDPR, as well as to processing for the purpose of direct marketing.
Right to Lodge a Complaint with the Supervisory Authority
Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be reached at the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 (1) lit. f of the GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.