+43 (0) 660 233 86 80 Graben 24 | A-3003 Gablitz office@boombell.eu

Privacy Policy

1. Information about the collection of personal data and contact details of the responsible party

1.1 We are delighted that you are visiting our website and thank you for your interest.
Hereafter, we will inform you about the handling of your personal data when using our website. Personal data refers to any information that can personally identify you.

1.2 The entity responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Boombell GmbH, Graben 24, 3003 Gablitz, Austria, Tel.: +43 (0) 660 760 29 60, Email:

office@boombell.eu.

The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

2. Data collection when visiting our website

When you visit our website for informational purposes only, meaning you do not register or otherwise provide information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • The visited website
  • Date and time of the access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (potentially in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no further sharing or other use of the data. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3. Hosting & Content-Delivery-Network

3.1 Hosting durch Microsoft Azure
Wir nutzen für den Betrieb unserer Webseite, die Auftrags- und Kundenverwaltung sowie die dazugehörigen Prozesse die Cloud-Computing-Plattform Microsoft Azure der Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Unter anderem werden hierdurch Kundendaten in der Cloud verarbeitet, gespeichert und gesichert. Microsoft verarbeitet personenbezogene Daten in der Cloud als weisungsgebundener Auftragsverarbeiter gemäß Art. 28 DSGVO und hat sich uns gegenüber vertraglich verpflichtet, diese Daten gemäß den gesetzlichen Anforderungen zu schützen. Hierfür bedient sich Microsoft modernster Verschlüsselungsverfahren und gewährleitstet den ausschließlichen Ablauf von Datenverarbeitungsverfahren in Rechnungszentren innerhalb der EU. Mehr Informationen zu den Datenschutzmaßnahmen in der Azure-Cloud können Sie unter https://azure.microsoft.com/de-de/overview/trusted-cloud/privacy/ einsehen.

3.2 Cloudflare
Auf unserer Website verwenden wir ein sog. Content Delivery Network (“CDN”) des Technologiedienstleisters Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA (“Cloudflare”). Bei einem Content Delivery Network handelt es sich um einen Online-Dienst, mit dessen Hilfe insbesondere große Mediendateien (wie z.B. Grafiken, Seiteninhalte oder Skripte) durch ein Netz regional verteilter und über das Internet verbundener Server ausgeliefert werden. Der Einsatz des Content Delivery Network von Cloudflare hilft uns bei der Optimierung der Ladegeschwindigkeiten unserer Website.
Die Verarbeitung erfolgt gemäß Art. 6 Abs. 1 lit. f DSGVO auf Basis unseres berechtigten Interesses an einer sicheren und effizienten Bereitstellung, sowie Verbesserung der Stabilität und Funktionalität unserer Website.
Wir haben mit Cloudfare einen Auftragsverarbeitungsvertrag (Data Processing Addendum, einsehbar unter https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf) abgeschlossen, mit dem Cloudfare verpflichtet wird, die Daten unserer Seitenbesucher zu schützen und sie nicht an Dritte weiter zu geben. Für die Übermittlung von Daten aus der EU in die USA beruft sich Cloudfare hierbei auf sog. Standarddatenschutzklauseln der Europäischen Kommission, welche die Einhaltung des europäischen Datenschutzniveaus in den USA gewährleisten sollen.
Weitere Informationen finden Sie in der Datenschutzerklärung von Cloudflare unter: https://www.cloudflare.com/privacypolicy/

4. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow us to save certain site settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the cookie settings of your web browser.
If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfill a contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website, as well as a user-friendly and effective design of your site visit.
You can set your browser to notify you about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5. Contact

5.1 Review reminder by Trustpilot A/S If you have expressly consented to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to the review platform Trustpilot A/S, Pilestræde 58, 5,1112 Kopenhagen, Dänemark (www.trustpilot.com) so that they can send you a review reminder via email. You can revoke your consent at any time by sending a message to the data controller or to the review platform.

5.2 When contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request, and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been finally clarified and provided there are no legal retention obligations.

5.3 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific business matter (e.g., a placed order), we will store and use the mobile phone number you used on WhatsApp, as well as – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b GDPR for processing and responding to your request. Based on the same legal basis, we may ask you for further data (order number, customer number, address or email address) via WhatsApp to assign your inquiry to a specific transaction.

If you use our WhatsApp contact for general inquiries (e.g., about our range of services, availability, or our website), we will store and use the mobile phone number you used on WhatsApp, as well as – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in providing the desired information efficiently and promptly.

Your data will only be used to respond to your request via WhatsApp. There will be no disclosure to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device that only stores WhatsApp contact data of users who have contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from their contact list in accordance with Art. 6 para. 1 lit. a GDPR by accepting WhatsApp’s terms of use on their device when using the app for the first time. Accordingly, the transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

Please refer to WhatsApp’s privacy policy for information on the purpose and scope of data collection, further processing and use of data by WhatsApp, as well as your rights and privacy settings: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6. Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide this information to us upon opening a customer account. The required data for opening an account can be found in the input mask of the respective form on our website. Deletion of your customer account is possible at any time and can be carried out by sending a message to the aforementioned address of the data controller. Upon deletion of your customer account, your data will be erased provided that all contracts associated with it have been fully executed, no legal retention periods conflict, and there is no legitimate interest on our part for further storage.

7.Comment Function

As part of the comment function on this website, in addition to your comment, details regarding the time of comment creation and the commentator name chosen by you are stored and published on this website. Furthermore, for security purposes, your IP address is stored to facilitate attribution to the author in the event of unlawful comments. Your email address is stored for contacting you in case a third party objects to your published content as unlawful.

8. Use of customer data for direct advertising

8.1 – Sending newsletters via Sendinblue
Our email newsletter is sent via the technical service provider Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Article 6 Paragraph 1 Letter f of the GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on Sendinblue’s servers in the EU.
Sendinblue uses this information to send and statistically evaluate the newsletters on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, are available. were clicked. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients. If you would like to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Sendinblue can use this data in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on its own legitimate interest in the needs-based design and optimization of the service as well as for market research purposes, for example to determine which countries the recipients come from. However, Sendinblue does not use the data of our newsletter recipients to write to them ourselves or to pass them on to third parties.
We have concluded an order processing agreement with Sendinblue, with which we oblige Sendinblue to protect our customers’ data and not to pass it on to third parties.
You can view Sendinblue’s privacy policy here: https://de.sendinblue.com/legal/privacypolicy/

8.2 – Advertising by postal mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address, and – if we have received this additional information from you in the course of the contractual relationship – your title, academic degree, year of birth, and your professional, sector, or business designation according to Art. 6 Para. 1 lit. f GDPR and use it to send interesting offers and information about our products by postal mail.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

8.3 – Product availability notification by email

For temporarily unavailable items, you can sign up to receive email notifications about product availability. Hereby, we will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing additional data is voluntary and will be used, if necessary, to address you personally. We use the so-called double opt-in process for sending emails, ensuring that you will only receive a notification after confirming your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. In this process, we store the IP address registered by the Internet service provider (ISP), as well as the date and time of registration, to be able to trace potential misuse of your email address at a later date. The data collected from our registration for our email notification service regarding product availability is strictly used for the intended purpose. You can unsubscribe from availability notifications at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list, unless you have expressly consented to further use of your data or unless we reserve further data usage permitted by law, about which we will inform you in this statement.

Certainly, here is the translated text:

9. Data Processing for Order Fulfillment

9.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us will be disclosed to the contracted transport company and the contracted financial institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data provided by you during the order (name, address, email address) to inform you personally within the legally specified period about upcoming updates via an appropriate communication channel (e.g., postal mail or email) in accordance with our legal obligation under Art. 6 Para. 1 lit. c GDPR. Your contact details will be strictly used for communications regarding updates owed by us and will be processed by us only to the extent necessary for the respective information.

For the processing of your order, we also collaborate with the following service provider(s), who assist us wholly or partially in the execution of concluded contracts. Certain personal data will be transferred to these service providers according to the following information.

9.2 Use of Special Service Providers for Order Processing and Fulfillment

LOGSTA Order processing is carried out through the service provider “LOGSTA” (LOGSTA Germany GmbH, Elbestraße 2, 84453 Mühldorf am Inn, Germany). Name, address, and, if applicable, further personal data will be forwarded to LOGSTA exclusively for processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data only occurs to the extent necessary for the actual processing of the order. Details regarding LOGSTA’s data protection and the privacy policy of LOGSTA Germany GmbH can be found on the LOGSTA website at: https://www.logsta.com/de/datenschutz

9.3 Transfer of Personal Data to Shipping Service Providers

Deutsche Post If the delivery of goods is handled by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will share your email address pursuant to Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notifications before delivering the goods, provided that you have given your explicit consent for this during the order process. Otherwise, for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR, we will only disclose the recipient’s name and delivery address to Deutsche Post. The transfer will only be made to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or the delivery notification is not possible. Consent can be revoked at any time with effect for the future by notifying the responsible party mentioned above or Deutsche Post.

DHL If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will share your email address pursuant to Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notifications before delivering the goods, provided that you have given your explicit consent for this during the order process. Otherwise, for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR, we will only disclose the recipient’s name and delivery address to DHL. The transfer will only be made to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible. Consent can be revoked at any time with effect for the future by notifying the responsible party mentioned above or the transport service provider DHL.

9.4 Use of payment service providers

Amazon Pay When selecting the payment method “Amazon Pay,” the payment processing is carried out by the payment service provider Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter referred to as “Amazon Payments”), to whom we transfer the information provided by you during the ordering process along with information about your order in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data is solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies, small text files stored on the end device, are set when using Amazon Pay, this is done solely based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time using the “Cookie Consent Tool” implemented on the website. You can find further information about the data protection regulations of Amazon Payments at the following internet address:: https://pay.amazon.com/de/help/201751600

– Apple Pay

If you select the payment method “Apple Pay” from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing will be conducted via the “Apple Pay” function of your device operating with iOS, watchOS, or macOS by charging a payment card stored in “Apple Pay.” Apple Pay utilizes security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, the entry of a code previously set by you and verification through the “Face ID” or “Touch ID” function of your device is required.

For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for payment processing. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is completed, Apple sends your device’s account number and a transaction-specific, dynamic security code to the original website to confirm the payment’s success.

If personal data is processed in the described transmissions, the processing is solely for the purpose of payment processing according to Art. 6 para. 1 lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, date, and time, and whether the transaction was successfully completed. Anonymization ensures complete disassociation with individuals. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.

When using Apple Pay on iPhone or Apple Watch to complete a purchase made via Safari on Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to “Wallet & Apple Pay” and disable “Allow payments on Mac.”

For further information on data protection with Apple Pay, please visit the following website: https://support.apple.com/de-de/HT203027

  • PayPal For payments via PayPal, credit card via PayPal, direct debit via PayPal, or if offered, “purchase on account” or “installment payment” via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment process. The transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or if offered, “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the decision on providing the respective payment method. The credit check may include probability values (so-called score values). If score values are used in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other factors but not exclusively, may influence the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal’s Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if it is necessary for the contractual payment processing.

  • SOFORT When selecting the payment method ‘SOFORT,’ the payment is processed through the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter ‘SOFORT’). We pass on your information provided during the ordering process along with the information about your order to SOFORT in accordance with Art. 6 para. 1 lit. b GDPR. The Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data is exclusively for the purpose of processing the payment with the payment service provider SOFORT and only to the extent necessary. For more information on SOFORT’s privacy policy, please visit: https://www.klarna.com/sofort/datenschutz.
  • Stripe If you choose a payment method from the payment service provider Stripe, the payment processing will be carried out by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We will share the information provided during the ordering process, along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number), according to Art. 6 para. 1 lit. b GDPR. Further information on Stripe’s privacy policy can be found at the URL https://stripe.com/de/privacy#translation.

Stripe reserves the right to conduct a credit check based on mathematical-statistical methods to maintain the legitimate interest in determining the user’s creditworthiness. Stripe may transmit the personal data required for a credit check and received as part of the payment processing to selected credit agencies, which Stripe discloses to users upon request. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other factors, is taken into account in the calculation of the score values. Stripe uses the result of the credit check regarding the statistical probability of default for the purpose of deciding on the authorization for using the selected payment method.

You can object to this processing of your data at any time by sending a message to Stripe or the appointed credit agencies.

However, Stripe may still be entitled to process your personal data if it is necessary for the contractual payment processing.

10.Online Marketing

10.1 Facebook Pixel for the Creation of Custom Audiences (with Cookie Consent Tool) Within our online offering, the so-called “Facebook Pixel” of the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”), is used. When a user clicks on an advertisement we’ve placed, displayed on Facebook, an addition is appended to the URL of our associated page via the Facebook Pixel. If our page allows data sharing with Facebook through Pixel, this URL parameter is written into the user’s browser via a cookie, which is set by our associated page itself. Subsequently, this cookie is read by the Facebook Pixel, enabling the transmission of data to Facebook. Using the Facebook Pixel, Facebook can determine the visitors of our online offering as a target group for displaying advertisements (referred to as “Facebook Ads”). Accordingly, we utilize the Facebook Pixel to display the Facebook Ads we’ve created only to those Facebook users who have demonstrated an interest in our online offering or possess certain attributes (such as interests in specific topics or products, determined based on visited websites) that we transmit to Facebook (referred to as “Custom Audiences”). With the Facebook Pixel, we aim to ensure that our Facebook Ads align with the potential interests of users and do not cause inconvenience. Consequently, we can further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were directed to our website after clicking on a Facebook advertisement (referred to as “Conversion”). The data collected remains anonymous to us and does not provide us with insights into the identity of the users. However, Facebook stores and processes the data, enabling a connection to the respective user profile. Facebook may use the data for its own advertising purposes, in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). This data may enable Facebook and its partners to display advertisements on and off Facebook. The data processing associated with the use of the Facebook Pixel occurs solely with your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

10.2 Use of Affiliate Programs

– AWIN Performance Advertising Network We participate in the Performance Advertising Network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter referred to as “AWIN”). As part of its tracking services, AWIN stores cookies on users’ devices to document transactions (such as “sales leads”) made by users visiting or using websites or other online offerings of its clients (for example, registering for a newsletter subscription or placing an online order). These cookies solely serve the purpose of correctly attributing the success of an advertising medium and its corresponding billing within its network. A cookie contains only information about when a specific advertising medium was clicked from a device. AWIN tracking cookies contain an individual, non-personally identifiable sequence of numbers used to document the advertiser’s partner program, the publisher, and the time of the user’s action (click or view). AWIN also collects information about the device through which a transaction is performed, such as the operating system and the browser used. If the information contains personal data, the described processing is based on our legitimate financial interest in handling commission payments with AWIN, in accordance with Art. 6 Para. 1 lit. f GDPR. If you do not wish to store cookies in your browser, you can adjust this through the corresponding browser settings. In your respective browser, you can disable the storage of cookies under Tools/Internet Options, restrict it to certain websites, or configure your browser to notify you when a cookie is sent. Please note, however, that this may result in limited display of online offerings and restricted user guidance. You can also delete cookies at any time, removing the stored information from your device. For further information on data usage by AWIN, please refer to the company’s privacy policy: https://www.awin.com/de/rechtliches Where legally required, we have obtained your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the data processing described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the procedure outlined above for lodging an objection.

11. Web analytics services

11.1 Google (Universal) Analytics This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies”, which are text files that are stored on your device and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; this may also be transmitted to the servers of Google LLC. come to the USA. This website uses Google (Universal) Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by shortening it and excludes any direct reference to a person. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data. Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized targeting of marketing measures. However, records collected using “demographic characteristics” cannot be assigned to a specific person. Details about the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites All processing described above, in particular the setting of Google Analytics cookies to read information on the device used, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, Google Analytics will not be used during your visit to the site. You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA. Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

11.2 Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze the use of websites. When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files that are stored on your device and enable your use of a website to be analyzed. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in information being transmitted to the servers of Google LLC based in the USA and further processing of the information there. When using Google Analytics 4, the IP address transmitted by your device when you use the website is always collected and processed automatically and in an anonymous manner by default, so that the information collected cannot be directly related to a person. This automatic anonymization occurs by shortening the IP address transmitted by your device by Google within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA) by the last digits. On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and your usage behavior and to provide us with other services related to your website use and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 is not merged with other Google data. The data collected when using Google Analytics 4 is stored for 2 months and then deleted. Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users based on an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate user groups of the website for the purpose of targeting marketing measures in a target group-optimized manner. However, data collected via “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is retained for two months and then deleted. All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to use the website, will only take place if you inform us of this in accordance with Art. 6 Para. 1 lit. a GDPR you have given your express consent. Without your consent, Google Analytics 4 will not be used while you use the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the “cookie consent tool” provided on the website. We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, through which Google is obliged to protect the data of our website users and not to pass it on to third parties. To ensure compliance with the European level of data protection, including any transfer of data from the EU or EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google. Further legal notices regarding Google Analytics 4, including a copy of the standard contractual clauses mentioned, can be found at https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

12.Retargeting/Remarketing/Recommendation Advertising

Google Ads Remarketing This website utilizes the online advertising program “Google Ads” and within Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We employ Google Ads to promote our attractive offers via advertising materials (known as Google AdWords) on external websites. We aim to assess the success of each advertising campaign by associating data related to these campaigns. Our intention is to display advertisements that are relevant to your interests, make our website more appealing to you, and ensure a fair calculation of advertising costs incurred.

The conversion tracking cookie is placed when a user clicks on an Ads advertisement provided by Google. Cookies are small text files stored on your device, typically expiring after 30 days and not used for personal identification. If the user visits specific pages of this website within the cookie’s duration, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie, meaning cookies cannot be tracked across the websites of Google Ads customers. Information obtained via the conversion cookie is used to generate conversion statistics for Google Ads customers utilizing conversion tracking. Customers receive aggregated data on the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, they do not receive information enabling personal user identification. Personal data may be transmitted to servers of Google LLC. in the USA as part of using Google Ads.

For detailed information on the data processing initiated by Google Ads conversion tracking and Google’s handling of website data, please visit: https://policies.google.com/technologies/partner-sites

All the aforementioned processes, especially the setting of cookies for information retrieval on the used device, will only occur if you have expressly consented pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be fully available or operational if you have disabled the use of cookies.

Find Google’s privacy policies here: https://www.google.com/policies/privacy/

13. Page functionalities

13.1 Use of YouTube videos
This website uses the YouTube embedding feature for displaying and playing videos from the provider “YouTube,” which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The extended data protection mode is utilized, which, according to the provider, only triggers the storage of user information upon video playback. When embedded YouTube videos are played, the provider “YouTube” sets cookies to collect information about user behavior. According to information from “YouTube,” these cookies are used, among other things, to gather video statistics, improve user-friendliness, and prevent abusive actions. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish this association with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right. Personal data may be transferred to servers of Google LLC. in the USA when using YouTube. Regardless of whether embedded videos are played, a connection to the Google network is established each time this website is accessed, potentially initiating further data processing beyond our control. All the described processes, especially the extraction of information from the used device via the tracking pixel, will only occur if you have expressly consented in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of YouTube videos will not take place during your visit to the site. You can revoke your consent at any time for the future. To do so, please deactivate this service using the “Cookie Consent Tool” provided on the website or other alternative methods communicated on the site. For more information on privacy at “YouTube,” please refer to the YouTube Terms of Service: https://www.youtube.com/static?template=terms, as well as Google’s Privacy Policy: https://www.google.com/intl/en/policies/privacy

13.2 Using Vimeo videos
Plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA, are integrated into our website. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Vimeo’s servers. The plugin’s content is directly transmitted to your browser by Vimeo and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged into Vimeo. This information, including your IP address, is sent by your browser directly to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (e.g., by clicking the start button of a video), this information is also sent directly to a Vimeo server and stored there. If you do not want Vimeo to directly associate the data collected through our website with your Vimeo account, you must log out of Vimeo before visiting our website. Please refer to Vimeo’s privacy policy for the purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your rights and privacy settings: https://vimeo.com/privacy For Vimeo videos embedded on our site, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is a separate tracking tool of Vimeo that we do not have access to and cannot influence from our site. Google Analytics uses so-called “cookies” for tracking, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there, which may also involve the transmission to servers of Google LLC. in the USA. All the described processes, especially the extraction of information from the used device via the tracking pixel, will only occur if you have expressly consented in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of Vimeo videos will not take place during your visit to the site. You can revoke your consent at any time for the future. To do so, please deactivate this service using the “Cookie Consent Tool” provided on the website or other alternative methods communicated on the site.

13.3 Login With Amazon

On our website, you can register or create a customer account using the “Login with Amazon” service provided by Amazon EU S.a. r.l., 38 Avenue John F. Kennedy, L-1855 Luxembourg (“Amazon”) as part of the so-called Single Sign-On technique, if you have an Amazon account. You can recognize the Amazon login function on our website by the button labeled “Login with Amazon” or “Mit Amazon anmelden.”

When you visit a page of our website that includes an Amazon login function, your browser establishes a direct connection to Amazon’s servers. The content of the login button is transmitted directly to your browser by Amazon and integrated into the page. Through this integration, Amazon receives information that your browser has accessed the respective page of our website, even if you do not have an Amazon profile or are not logged into Amazon at that moment. This information (including your IP address) is transmitted directly from your browser to an Amazon server and stored there. These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Amazon’s legitimate interest in displaying personalized advertising based on browsing behavior.

By using the Amazon login button on our website, you also have the option to log in or register on our website using your Amazon user data. Only when, before the registration process, based on a corresponding notice about the exchange of data with Amazon, you give your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, we receive, depending on your personally made privacy settings on Amazon, the general and publicly accessible information stored in your profile. This information includes the user ID, name, address, email address, age, and gender.

The data transmitted by Amazon to us is stored and processed for the creation of a user account with the necessary data (title, first name, last name, address, country, email address, date of birth), if you have released it on Amazon. Conversely, based on your consent, data (such as information about your browsing or purchasing behavior) can be transferred from us to your Amazon profile.

The consent given can be revoked at any time by sending a message to the responsible party mentioned at the beginning of this data protection declaration.

Please refer to Amazon’s privacy policy for information on the purpose and scope of data collection, further processing, and use of data by Amazon, as well as your rights and privacy protection settings: Amazon Privacy Policy

If you do not want Amazon to directly associate the data collected through our website with your Amazon profile, you must log out of Amazon before visiting our website.

13.4 Facebook Connect
On our website you can create a customer account or register using the social plugin “Facebook Connect” of the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“ Facebook”), is operated using the so-called single sign-on technology if you have a Facebook profile. You can recognize the “Facebook Connect” social plugins on our website by the blue button with the Facebook logo and the inscription “Log in with Facebook” or “Connect with Facebook” or “Log in with Facebook” or “Sign in with Facebook”. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook Inc. server in the USA and stored there. These data processing operations are carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on Facebook’s legitimate interest in displaying personalized advertising based on your surfing behavior. By using this “Facebook Connect” button on our website, you also have the opportunity to log in or register on our website using your Facebook user data. Only if you give your express consent in accordance with Art. 6 Para. 1 lit. Depending on your personal data protection settings on Facebook, the general and publicly accessible information stored in your profile. This information includes user ID, name, profile picture, age and gender. We would like to point out that following changes to Facebook’s data protection conditions and terms of use, your profile pictures, your friends’ user IDs and your friends list may also be transferred when you give your consent if they are marked as “public” in your privacy settings on Facebook became. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary data (title, first name, last name, address details, country, email address, date of birth), if you have approved them for this purpose on Facebook. Conversely, based on your consent, we can transfer data (e.g. information about your surfing or purchasing behavior) to your Facebook profile. The consent given can be revoked at any time by sending a message to the person responsible named at the beginning of this data protection declaration. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook’s data protection information: https://www.facebook.com/policy.php If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plugins from loading with add-ons for your browser, e.g. with “Adblock Plus” (https://adblockplus.org/de/).

13.5 Google Sign In
On our website you can create a customer account or register via the “Google Sign-In” service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) within the scope of the so-called Register using Single Sign On technology if you have a Google profile. You can recognize the Google login function on our website by the button “Sign in via Google” “Sign in with Google account” or “Sign in with Google”.
When you access a page on our website that contains a Google login function, your browser establishes a direct connection to Google’s servers. The content of the login button is transmitted directly to your browser by Google and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Google profile or are not currently logged in to Google. This information (including your IP address) is transmitted from your browser directly to a Google server and stored there; this may also be transmitted to the servers of Google LLC. come to the USA. These data processing operations are carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of Google’s legitimate interest in displaying personalized advertising based on surfing behavior.
By using the Google login button on our website, you also have the opportunity to log in or register on our website using your Google user data. Only if you give your express consent in accordance with Art. 6 Para. 1 lit. a GDPR before the registration process based on a corresponding notice about the exchange of data with Google, we will receive this from Google when you use the Google button, depending on yours personal data protection settings at Google, the general and publicly accessible information stored in your profile. This information includes user ID, name, profile picture, age and gender.
We would like to point out that after changes to Google’s data protection conditions and terms of use, your profile pictures, the user IDs of your friends and the friend list may also be transferred when you give your consent if these are set as “public” in your privacy settings at Google. were marked. The data transmitted by Google will be stored and processed by us to create a user account with the necessary data (title, first name, last name, address details, country, email address, date of birth), if you have approved this for this purpose with Google. Conversely, based on your consent, we can transfer data (e.g. information about your surfing or purchasing behavior) to your Google profile.
The consent given can be revoked at any time by sending a message to the person responsible named at the beginning of this data protection declaration.
The purpose and scope of data collection and the further processing and use of the data by Google as well as your related rights and setting options to protect your privacy can be found in Google’s data protection information: https://policies.google.com/privacy?hl=de&gl=de
You can view the terms of use for the use of “Google Sign-In” here: https://policies.google.com/terms
If you do not want Google to directly assign the data collected via our website to your Google profile, you must log out of Google before visiting our website. You can also completely prevent the Google plugins from loading with add-ons for your browser, e.g. with “Adblock Plus” (https://adblockplus.org/de/).

13.6 Trusted Shops Trustbadge The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of quality and to offer Trusted Shops membership to buyers after an order. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer, Art. 6 Para. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When you access the trust badge, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your site visit. Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

13.7 – Google Web Fonts This site uses so-called web fonts for the uniform display of fonts, which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. This may also result in personal data being transmitted to the Google LLC servers. come to the USA. In this way, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f of the GDPR. If your browser does not support web fonts, a standard font will be used by your computer. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

13.8 Google reCAPTCHA On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry is made by a natural person or whether it is improperly processed through machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come to the USA. You can view further information about Google reCAPTCHA and Google’s privacy policy at: https://www.google.com/intl/de/policies/privacy/

14. Tools and Miscellaneous

14.1 – Xentral ERP To carry out the accounting, we use the cloud-based accounting software from Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg (“Xentral ERP”). Xentral ERP processes incoming and outgoing invoices as well as our company’s bank transactions in order to automatically record invoices, match them to the transactions and create financial accounting from them in a semi-automated process. If personal data is also processed, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes. Further information about Xentral ERP, the automated processing of data and the data protection regulations can be found at https://xentral.com/de/datenschutz/

14.2 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent can be given for certain cookies and/or cookie-based applications by checking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only set on the user’s device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in doing so legally compliant, user-specific and user-friendly consent management for cookies and therefore a legally compliant design of our website.
Another legal basis for processing is Article 6 Paragraph 1 Letter c GDPR. As those responsible, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user consent.
Further information about the operator and the setting options for the cookie consent tool can be found directly in the corresponding user interface on our website.

15. Rights of the person concerned

15.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) towards the person responsible with regard to the processing of your personal data, whereby reference is made to the legal basis listed for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to deletion in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
  • Right to complain in accordance with Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE. IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

16. Duration of Personal Data Storage

The duration of storing personal data is determined based on the respective legal basis, the purpose of processing, and – if applicable – additionally based on the respective legal retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject revokes their consent.

If there are legal retention periods for data processed on the basis of contractual or similar obligations in accordance with Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for contract performance or initiation and/or there is no legitimate interest on our part in continuing to store it.

In cases where personal data is processed based on Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is for asserting, exercising, or defending legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in other information within this statement concerning specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.