Data privacy

as well as information on any consents you may have given

As the controller within the meaning of data protection law, we inform you below about the processing of your personal data by us.

I. The term personal data and other important terms

Personal data are, simply put, all information relating to you personally as the data subject. Provisions on what the term "personal data" means and what other important terms for the following data protection information mean can be found in Article 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officerThe controller is, simply put, the person who alone or jointly with others decides on the purposes and means of processing personal data. You can find the name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint.

III. Purposes of processing your personal data; legal bases for processingWe process your personal data within the scope of our activities for the purposes listed below in accordance with the respective legal bases mentioned.
To safeguard our legitimate interest in maintaining the proper operation of our website, providing as user-friendly functions as possible, and analyzing the use of our website, the processing of your personal data is based on Article 6(1)(f) GDPR.
For the implementation of pre-contractual measures carried out upon your inquiry, the processing of your personal data is based on Article 6(1)(b) GDPR.
To safeguard our legitimate interest in responding to inquiries and carrying out other measures based on your inquiry, the processing of your personal data is based on Article 6(1)(f) GDPR.
For the fulfillment of a contract to which you are a party, the processing of your personal data is based on Article 6(1)(b) GDPR.
For carrying out measures for advertising purposes, the processing of your personal data is either based on your consent pursuant to Article 6(1)(a) GDPR or on Article 6(1)(f) GDPR.
To fulfill legal obligations to which we are subject, the processing of your personal data is based on Article 6(1)(c) GDPR.
To safeguard our legitimate interest in enforcing our rights and defending against claims made against us, the processing of your personal data is based on Article 6(1)(f) GDPR.
Our systems are secured according to the state of the art by technical and organizational measures to protect your personal data from access, alteration, or dissemination by unauthorized persons as well as from loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information within this privacy policy.
IV. Transmission of your personal data to third parties; categories of recipients of your personal dataTo the extent necessary to achieve the purposes of processing your personal data, we transmit your personal data to third parties within the framework of legal requirements. Detailed information on the transmission of your personal data to third parties for the individual processing purposes can be found in the corresponding further information within this privacy policy. In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.
V. Scope of processing your personal data for the individual processing purposesBelow we inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when they are no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
Use of our website for informational purposesIf you visit our website without providing us with information, we only process the personal data that your browser transmits to our server. These are the following data, which are technically necessary to display our website to you and to ensure stability and security:
the page you accessed
date and time of the request
amount of data transferred
source or reference from which you reached the page
browser used by you
operating system used by you
your IP address
The processing of your personal data is based on Article 6(1)(f) GDPR to safeguard our legitimate interest in maintaining the proper operation of our website, providing as user-friendly functions as possible, and analyzing the use of our website.
Your personal data will be deleted after 6 months unless they are still needed for asserting rights or enforcing claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after completion of the corresponding procedure.
You are not obliged to provide your personal data. However, failure to provide your personal data would mean that you cannot view our website.
Processing of inquiriesIf you contact us with an inquiry or concern, we process the personal data and information/documents you provide. Regardless of how you send us your inquiry or concern, these may include:
date and time of contact
name data
contact details
data regarding the inquiry/concern
transmitted information/documents
The processing of your personal data and the transmitted information/documents is based—depending on the content of your inquiry or concern—on Article 6(1)(b) GDPR for the implementation of pre-contractual measures or on Article 6(1)(b) GDPR for the fulfillment of a contract to which you are a party or on Article 6(1)(f) GDPR to safeguard our legitimate interest in responding to inquiries/concerns and carrying out other measures related to the processing of inquiries/concerns.
To the extent necessary for processing your inquiry/concern, we transmit your personal data to third parties within the framework of legal requirements. In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.
Your personal data will be deleted when your inquiry/concern has been clarified, but at the earliest after expiration of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot process your inquiry or concern.
Fulfillment of contractsIf you provide us with personal data for the purpose of concluding a contract or in connection with a contract, we process the data you provide for the execution of the contract. These are your customer data (e.g., your name and address) and contract data (e.g., information about the contractual products as well as payment and delivery information).
The processing of your personal data is based on Article 6(1)(b) GDPR for the fulfillment of a contract to which you are a party.
To the extent necessary for the fulfillment of the contract with you, we transmit your personal data to third parties within the framework of legal requirements. This transmission is made to service providers involved in contract processing. These are providers of the processing tools we use, companies commissioned with transport, and payment service providers commissioned with payment matters.
If you use the payment service provider PayPal for payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.
Your personal data will be deleted after expiration of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
Providing your personal data is necessary for concluding a contract with us. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot conclude a contract with you.
Advertising by newsletterIf you register for our newsletter, we process the email address you provide—and if you provide further personal data, also these—to send you information about our offers by email. Only providing your email address is mandatory. If you voluntarily provide further personal data, we may process these data to address you personally in the newsletter.
By registering for our newsletter, you give consent with the following content: "I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and other personal data I provide for the purpose of sending the newsletter. I can revoke this consent at any time without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."
The registration for our newsletter is done via the so-called double opt-in procedure. This means: After registration, you will first receive an email notifying you of the registration for the newsletter along with a request to confirm the registration. Your confirmation of the registration is required to document the necessary consent to send the newsletter and to detect registrations on foreign email addresses. In connection with newsletter registrations and confirmations, the IP address as well as date and time are logged to be able to prove the granting of consent in accordance with legal requirements if necessary.
The processing of your personal data is based on the consent you have given pursuant to Article 6(1)(a) GDPR.
You can revoke your consent at any time without giving reasons with effect for the future. For this purpose, a corresponding message to the controller is sufficient, whose contact details you can find in the information about the controller. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.
If you revoke your consent or unsubscribe from our newsletter, your email address and any other data provided will be deleted immediately unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
At least providing your email address is required to receive our newsletter. You are not obliged to provide your email address. However, failure to provide your email address would mean that you cannot subscribe to our newsletter.
Advertising by postal mailWe process the personal data you provide regarding your first and last name and address, if applicable, to send you information about our offers by postal mail.
The processing of your personal data is based on Article 6(1)(f) GDPR to safeguard our legitimate interest in carrying out advertising measures by postal mail.
You can object to the processing of your personal data for the purpose of carrying out advertising measures by postal mail at any time. For this purpose, a corresponding message to the controller is sufficient, whose contact details you can find in the information about the controller.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by postal mail, the personal data you provided regarding your first and last name and address will be deleted immediately unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
You are not obliged to provide your personal data for carrying out advertising measures by postal mail. However, failure to provide your personal data would mean that we cannot send you advertising by postal mail.
Fulfillment of legal obligations to which we are subjectWithin the scope of the corresponding requirements, we process your personal data to fulfill legal obligations to which we are subject.
The processing of your personal data to fulfill legal obligations to which we are subject is based on Article 6(1)(c) GDPR.
To the extent necessary to fulfill legal obligations to which we are subject, we transmit your personal data to third parties within the framework of legal requirements. In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.
Your personal data will be deleted when they are no longer needed to fulfill legal obligations to which we are subject, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
Enforcement of our rights and defense against claims made against usIf necessary, we process your personal data to safeguard our legitimate interest in enforcing our rights and defending against claims made against us.
In this case, the processing of your personal data is based on Article 6(1)(f) GDPR.
To the extent necessary to safeguard our legitimate interest, we transmit your personal data to third parties within the framework of legal requirements. This transmission is made to the involved providers of debt collection services or our lawyers.
In cases of transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.
Your personal data will be deleted after completion of the procedure, but at the earliest after expiration of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy.
VI. Duration for which your personal data are stored or criteria for determining this durationYour personal data will be deleted when they are no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data are stored or on the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.
VII. Your rightsOverviewTo ensure fair and transparent processing of personal data, you as the data subject have the following rights under data protection law:
the right to information pursuant to Article 15 GDPR,
the right to rectification pursuant to Article 16 GDPR,
the right to erasure pursuant to Article 17 GDPR,
the right to restriction of processing pursuant to Article 18 GDPR,
the right to data portability pursuant to Article 20 GDPR,
the right to withdraw consent at any time pursuant to Article 7(3) GDPR,
the right to object to processing pursuant to Article 21 GDPR, about which we inform you separately below,
and the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, about which we inform you separately below.
Your right to object to processingPROCESSING OF PERSONAL DATA IS PERMISSIBLE IF PROCESSING IS NECESSARY TO SAFEGUARD THE LEGITIMATE INTERESTS OF THE CONTROLLER OR A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT THAT REQUIRE PROTECTION OF PERSONAL DATA PREVAIL, ESPECIALLY IF THE DATA SUBJECT IS A CHILD, ARTICLE 6(1)(F) GDPR.
AS A DATA SUBJECT, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU THAT IS BASED ON ARTICLE 6(1)(F) GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS AS THE DATA SUBJECT, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.
Your right to lodge a complaint with the supervisory authorityAs a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR, without prejudice to any other administrative or judicial remedy.
VIII. Information on the basis for providing your personal data and possible consequences of non-provisionTo the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal data and possible consequences of non-provision in the information on the processing of your personal data for the individual processing purposes.