data protection

With this data protection declaration, we inform you as the data controller in accordance with the requirements of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) about the type, scope and purpose of the processing of personal data in connection with our website.

I. Definitions

1. ‘personal data’ means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

2. ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

3. ‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

4. 'recipient' means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules and in accordance with the purposes of the processing;

II. General information

1. Person responsible for data processing

Horando Deutschland GmbH
Osterstrasse 3
30159 Hannover
Germany
Telephone: +49 (0) 511 / 367 315 50
contact@horando.de

2. Contact details of the company data protection officer

We have not appointed a data protection officer and are not obliged to appoint such a data protection officer.

3. Legal basis

We process personal data on the basis of at least one of the following legal bases:

Consent of the data subject to the processing of personal data concerning him or her for one or more specific purposes (Article 6 (1) sentence 1 lit. a GDPR);
Fulfillment of a contract with the data subject or to carry out pre-contractual measures at the request of the data subject (Article 6 (1) sentence 1 lit. b GDPR);
Fulfillment of a legal obligation to which we are subject (Article 6 (1) sentence 1 lit. c GDPR);
Protection of the vital interests of the data subject or of another natural person (Article 6 (1) sentence 1 lit. d GDPR);
safeguarding our legitimate interests or those of a third party (Article 6 (1) sentence 1 lit. f GDPR)

In this data protection declaration we refer to the respective legal basis for individual processing operations.

4. Transfer of data to recipients

We only pass on personal data to recipients (contract processors or other third parties) to the extent necessary and only under one of the following conditions:

The data subject has consented to the transfer;
The transfer serves to fulfil contractual obligations or pre-contractual measures at the request of the data subject;
We are legally obliged to pass on information;
The data will be passed on based on our legitimate interests or those of a third party.

5. Third countries

The transfer of personal data to a country or an international organization outside the European Union (EU) or the European Economic Area (EEA) is subject to legal or contractual permissions only in accordance with the requirements of Art. 44 et seq. GDPR. This means that an adequacy decision of the EU Commission pursuant to Art. 45 GDPR exists for the country in question, appropriate guarantees for data protection pursuant to Art. 46 GDPR or binding internal data protection regulations pursuant to Art. 47 GDPR exist.

6. Rights of the data subject

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, you can request information about your personal data processed by us; you can also request information regarding the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the origin of your data if it was not collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information on its details such as logic, scope and effects, the existence of a right to rectification or erasure of data concerning you, the right to restrict processing or to object to such processing, the existence of a right to lodge a complaint with the supervisory authority; finally, you have the right to information as to whether personal data has been transferred to a third country or to an international organization and - if so - about the appropriate guarantees in connection with the transfer;
According to Art. 16 GDPR, you can request the immediate correction of inaccurate or the completion of your personal data stored by us;
pursuant to Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
pursuant to Art. 18 GDPR, you can request that the processing of your personal data be restricted if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, you need the data we no longer need to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR but it has not yet been determined whether our legitimate reasons for processing the data outweigh your interest;
pursuant to Art. 20 GDPR, you can request that your personal data that you have provided to us be transferred to you in a structured, common and machine-readable format or that it be transmitted to another controller;
pursuant to Art. 21 GDPR, you can object to the processing of your personal data if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising and the legal basis for the processing of the personal data is legitimate interests pursuant to Art. 6 Paragraph 1 Clause 1 Letter f GDPR;
According to Art. 7 Para. 3 GDPR, you can revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future;
- pursuant to Art. 77 GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

If you would like to assert the above-mentioned rights of the data subject, you can contact us at any time using the contact details provided above.

7. Deletion and restriction of personal data

Unless otherwise provided for in this data protection declaration for individual cases, personal data will be deleted if this data is no longer required for the purposes for which it was collected or otherwise processed and there are no statutory retention periods that prevent deletion. We also delete the personal data we process on request in accordance with Art. 17 GDPR if the requirements set out therein are met. If personal data is required for other legally permissible purposes, it will not be deleted, but its processing will be restricted in accordance with Art. 18 GDPR. If the data is restricted, the data will not be processed for other purposes. This applies, for example, to personal data that we must retain for commercial or tax law reasons. For example, documents pursuant to Section 257 Para. 1 Nos. 2 and 3 HGB and Section 147 Para. 1 Nos. 2, 3, 5 AO are kept for 6 years, while documents pursuant to Section 257 Para. 1 Nos. 1 and 4 HGB and Section 147 Para. 1 Nos. 1, 4, 4a AO are kept for 10 years.

8. Cookies

We use cookies as part of our website. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses or other malware. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we immediately know your identity. Cookies are primarily used to make the website more user-friendly, effective and secure.

We use session cookies to recognize during your visit to our site that you have already visited individual pages of our website. Such cookies also provide certain functionalities. Session cookies are deleted after the end of your visit to our website.

In addition, we also use temporary cookies to optimize user-friendliness and statistically evaluate the use of our services. These cookies are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us before and what entries and settings you have made so that you do not have to enter them again.

The data processed by cookies are necessary for the purposes mentioned in order to safeguard our resulting legitimate interests and those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. If you do not want this, you can configure your browser so that no cookies are stored on your device or a message always appears before a new cookie is created. A general objection to the use of cookies used for online marketing purposes can be declared for a variety of services, for example at http://www.youronlinechoices.com/ or the deactivation page of the network advertising initiative http://optout.networkadvertising.org . Deactivating cookies may, however, mean that you cannot use all the functions of our website.

III. Individual processing operations

1. Hosting

To provide our Internet offering, we use services from hosting companies, such as the provision of web servers, storage space, database services, security services and maintenance services.

We or our hosting provider process personal data of users of our website on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 (1) (f) GDPR.

2. Access data and log files

When you access our website or individual pages, the browser on your device automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider and is deleted after 3 months at the latest.

The following information is stored:

IP address of the requesting computer
date and time of access
Name and URL of the retrieved file
website from which access is made (referrer URL)
browser used and, if applicable, the operating system of your computer
status codes and amount of data transferred
name of your access provider

This data is processed for the following purposes:

Provision of the Internet offer including all functions and contents
Ensuring a smooth connection to the website
Ensuring comfortable use of our website
Ensuring system security and stability
Anonymized statistical evaluation of accesses
optimization of the website
Disclosure to law enforcement authorities if there has been an unlawful intrusion/attack on our systems
other administrative purposes

The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest follows from the purposes for data collection outlined above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about a person.

3. Contact form / Other contact

If you use the contact form, you will be asked to provide your name and email address and, if necessary, other contact details so that we can contact you personally. Additional information can be provided voluntarily. Data processing for the purpose of contacting us and answering your request is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of the consent you have voluntarily given. All personal data collected in connection with the contact form will be deleted after your request has been processed, unless retention is necessary for the documentation of other processes (e.g. subsequent conclusion of a contract).

If you contact us using the contact details published on our website (e.g. by email) and send us personal data, we will use this data exclusively to process your request and will then delete it.

4. E-mail direct advertising to customers

If you are a customer of ours and have received your email address in connection with the sale of a product or service, we can use your email address for direct advertising for our own similar products or services. This only applies if you have not objected and we clearly inform you of the possibility of objection when collecting the email address and each time it is used. The legal basis for the processing is our legitimate interest in direct marketing in accordance with Art. 6 Para. 1 lit. f GDPR.

4.1. SMS Shopping Cart Reminder Disclosure

The website uses cookies to track items you add to your shopping cart, including when you abandon your cart. This information is used to determine when to send SMS reminder messages.

4.2. Transfer of data to third parties

We will not share your consent to an SMS campaign with any third party except as necessary to provide you with that campaign's services. We may share your personal information, including your SMS opt-in or consent status, with third parties who help us provide our messaging services, including but not limited to platform providers, telephone carriers and other service providers who assist us in delivering text messages.

5th newsletter

If you would like to receive our newsletter, we need your email address. The data processing for the purpose of sending the newsletter is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of the consent you voluntarily give using the so-called double opt-in procedure. The email address is used for this purpose and stored until you revoke your consent or unsubscribe from receiving the newsletter. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your revocation/unsubscribe request at any time to the email address stated under Section II.

We send our newsletters with a so-called tracking pixel. A tracking pixel is a miniature graphic that is embedded in the HTML format of the newsletter sent in order to enable an analysis of reader behavior. In this context, we save whether and at what time a newsletter was opened by you and which of the links contained in the newsletter were accessed by you. We use this data to create statistical evaluations of the success or failure of a marketing campaign in order to optimize the newsletter dispatch and to better tailor the content of future newsletters to your interests. The data collected is not passed on to third parties and is deleted after the statistical evaluation.

6. MailChimp

The newsletter is sent via MailChimp. The provider of MailChimp is Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (hereinafter "MailChimp"). MailChimp is used to send and evaluate the reach of our newsletter. For this purpose, your email address and any other data required by MailChimp to provide the newsletter are processed on our behalf. The legal basis for processing by MailChimp is Art. 6 Para. 1 lit. f GDPR and our legitimate interest in using a user-friendly and secure newsletter system.

The personal data collected is stored on servers in the USA. MailChimp has joined the EU/US PrivacyShield and thus meets the European Union's requirements to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/US PrivacyShield can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active .

For more information about how MailChimp handles your personal data, please see the relevant privacy policy: http://mailchimp.com/legal/privacy/ .

7. Comments and contributions

If you leave comments or other contributions on our website, your email and IP address will be stored on the basis of our legitimate interests within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. Further information can be provided voluntarily. The purpose of storing your email address is that we can contact you regarding your comment or contribution, forward any complaints about your contribution to you and, if necessary, request a statement from you. It is not possible to use the comment function without providing your email address. The email address provided will be stored but not published with the comment. If you have a user account with us and are logged in, the contributions will be linked internally to your user account so that you can track the history.

Our legitimate interest in querying and storing the email address is for security reasons, e.g. in the event that someone leaves illegal content in comments and posts (e.g. insults). In this case, we ourselves could be prosecuted for the comment or post and therefore have a legitimate interest in storing the IP address. This personal data collected is only passed on to the law enforcement authorities in cases of criminal investigations. No other transfer to third parties takes place.

8. Gravatar

Our website uses the Gravatar service. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (hereinafter "Gravatar"). With Gravatar you can log in and save profile pictures and an email address. If you leave posts or comments on other websites using the relevant email address, your profile picture will be displayed in connection with this post. For this purpose, your email address will be sent to Gravatar in encrypted form, which also gives the provider knowledge of your IP address. Gravatar is used on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR, as we use Gravatar to give the author of the post the opportunity to personalize their post with a profile picture and thus make our own offer more attractive. You can prevent the integration of your profile picture stored on Gravatar by using an email address not known to Gravatar, by not using our comment system or by logging out of Gravatar.

Autmattic Inc. has joined the EU/US Privacy Shield Agreement, has committed to complying with European data protection standards and thus meets the EU requirements for legitimizing the transfer of personal data to the USA. Information on Automattic Inc.'s commitment can be found at https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active .

For more information about how Gravatar handles your personal data, please see its privacy policy: https://automattic.com/privacy/ .

9. Registration / User Account

You have the option of registering on our website by providing personal data. Registration is voluntary and takes place in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of the consent you have voluntarily given. Which personal data is transmitted is determined from the respective input mask used for registration. The personal data collected is used for the purposes of our offer and to contact you for offer- and registration-relevant information. You can view your personal data and make changes to this data via personal user access. Your data will be stored until you delete the user account or instruct us to delete your data. If we are obliged to retain your personal data due to statutory retention periods, in particular tax and commercial law retention periods, the processing of your personal data will be restricted accordingly until the retention periods expire and then this data will be deleted.

When you register on our website or use the user account, we save the IP address and the time of the respective usage action. The storage is based on our legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR to provide our offer. The storage is also in your interest in order to protect you from misuse and other unauthorized use. The user account and the data stored in this context also serve in particular to facilitate shopping and to enable access to historical orders and the writing of customer reviews. This data is generally not passed on to third parties unless it is necessary to fulfill contractual obligations in accordance with Art. 6 Paragraph 1 Letter b of GDPR or to pursue any claims to which we are entitled, or there is a legal obligation to do so in accordance with Art. 6 Paragraph 1 Letter c of GDPR. The IP addresses are anonymized or deleted after 3 months at the latest.

10. Contract data

In connection with and for the purpose of fulfilling pre-contractual measures and contractual obligations via our website, which are carried out at the request of the data subject, we process the data from the data subject required to fulfill the contract. This includes:

Data of the contractual partner, such as name, address and contact details, if applicable, different delivery or billing addresses or recipients and, if necessary, the date of birth;
Contract data, such as contract subject matter, term, customer category;
Payment data such as bank details, credit card details, payment history.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

The data will only be passed on to third parties to the extent that this is necessary to fulfill pre-contractual measures and contractual obligations, e.g. to banks, payment service providers, credit card companies to process payments and to shipping service providers to send goods.

IV. Online shop and age verification

PrestaShop

Our online shop uses the PrestaShop shop system. The provider is PrestaShop SA, 12 rue d'Amsterdam, 75009 Paris (hereinafter "PrestaShop"). The data you enter in our online shop is processed by PrestaShop on our behalf in accordance with Art. 28 GDPR.

For more information on how PrestaShop handles your personal data, please see the privacy policy: https://www.prestashop.com/de/datenschutz .

V. Payment service providers

1. PayPal

This website uses PayPal as a payment service provider. The provider is PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal acts as an online payment service provider and a trustee and offers buyer and seller protection services. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, your name, email address, products purchased, invoice amount, and billing and delivery address will be passed on to PayPal as part of the payment processing. When using the payment methods credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, PayPal may carry out a credit check to check creditworthiness and minimize payment defaults in order to decide whether to authorize the payment process. The credit check uses probability values (so-called score values), the calculation of which includes address data. The calculation of these scoring values is based on a scientifically recognized mathematical-statistical procedure. If your credit rating is insufficient, PayPal may reject the selected payment method. The legal basis for processing is Art. 6 (1) (b) GDPR.

If you do not agree to the data transfer or you believe that your credit rating is not suitable for the selected payment method, please use a different payment method. Further information on how PayPal handles your personal data can be found in the relevant privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE .

2. Sofortüberweisung

This website uses Sofortüberweisung as a payment service provider. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, or Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "Klarna"). Sofortüberweisung acts as an online payment service provider. When paying via Sofortüberweisung, your name, purchased products or services, invoice amount, and billing and delivery address are passed on to Sofortüberweisung as part of the payment processing. The legal basis for processing is Art. 6 Para. 1 lit. b GDPR. You can find more information about how Sofortüberweisung handles your personal data in the relevant data protection declaration: https://www.klarna.com/sofort/datenschutz/ .

VI. Google Services

The provider of the following Google services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The legal basis for the use of the following Google services is our legitimate interests according to Art. 6 (1) (f) GDPR.

Google has joined the EU/US Privacy Shield Agreement, thereby committing to complying with European data protection standards and thus meeting the EU's requirements to legitimize the transfer of personal data to the USA. Information on Google's commitment can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

For more information about how Google handles your personal data, please see Google's privacy policy: https://www.google.com/intl/de/policies/privacy/ . Information about Google's use of data for advertising purposes, settings and objection options can be found on these websites:

https://www.google.de/policies/privacy/partners/

https://www.google.de/policies/technologies/ads/

http://www.google.de/settings/ads

http://www.google.com/ads/preferences/

1. Google Analytics

This website uses Google Analytics from Google. Google Analytics uses cookies. Google collects data about users' visits to our website and their usage behavior. This data is used to ensure a needs-based design and ongoing optimization of our website, to measure the success of marketing measures and to create statistical evaluations. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request is transferred to a Google server in the USA and stored there. User and event data is deleted after 26 months. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned. You can prevent cookies from being saved by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de . You can prevent Google Analytics from collecting data by clicking on the link [

Disable Google Analytics

] to obtain an opt-out cookie. This cookie ensures that in future no visitor data from your browser will be collected and saved by Google Analytics when you visit this website. Important: If you delete your cookies, this will also delete the opt-out cookie and you may need to reactivate it.

2. Demographic characteristics in Google Analytics

This website uses the "demographic characteristics" function as part of Google Analytics. This enables reports to be created that contain information about the age, gender and interests of our site visitors. This data comes from interest-based advertising from Google as well as visitor data from third parties. This data cannot be assigned to a specific person. The legal basis for the use of the following Google services is our legitimate interest in optimizing our website and marketing it optimally in accordance with Art. 6 Para. 1 lit. f GDPR.

You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described above.

3. Google Analytics Remarketing

This website uses Google Analytics Remarketing from Google. Google Analytics Remarketing is used to show visitors advertisements that relate to content from previously visited websites. Google uses cookies to recognize visitors who visit websites from the Google advertising network. This service records your IP address, which of our websites you have visited and possibly other data required by Google to provide Analytics Remarketing. The IP address transmitted by your browser will under no circumstances be merged with other data held by Google. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to fully use all functions of this website. If you do not want Google's remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads .

4. Google AdWords with conversion tracking

This website uses Google AdWords from Google and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is used to track and evaluate clicks on ads, purchases, registrations, phone calls, app downloads and other actions you make on our website. Cookies are used for analysis and evaluation. This service records your IP address, which of our websites you have visited and, if applicable, other data required by Google to provide conversion tracking. The IP address transmitted by your browser will under no circumstances be merged with other data held by Google. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

5. Google Maps

This website uses Google Maps from Google to display site plans, maps, terrain data, or geographical maps. This service records your IP address, which of our websites you have visited, and possibly other data required by Google to provide the maps (e.g. location data). The information generated is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. The terms of use for Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html .

6. Google Web Fonts

This website uses external fonts from Google, so-called web fonts, to display fonts. When you visit the website, your browser loads the required web font into the browser cache. If your browser does not support this function, a standard font from your computer will be used to display the website. This service records your IP address, which of our websites you have visited and, if applicable, other data required by Google to provide the web fonts. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google.

VII. Social Media Plugins

We use social media plugins from social networks as part of our website. If a page on our website is accessed with such a plugin, your browser establishes a direct connection to the server of the respective provider, which allows the respective provider to know which page of our website was accessed and from which IP address. The same applies to activating the component, e.g. liking or sharing content or commenting on a post. We use a 2-click solution to integrate social media plugins. The data transfer described therefore only takes place when the activation click is clicked and not when the page is loaded.

If you are logged into the respective provider's social network at the same time, the respective provider can assign your visit to our website page directly to your user account there. If you click on the button for the respective plug-in, the corresponding information is sent to the respective provider and published there as a post in the profile of your social network. If you do not want the provider to be able to assign the data collected on our website to your respective user account with the provider, you must first log out of the relevant social network. The purpose of the plug-ins is to make our website better known and to share content from our website on social networks. We have a legitimate interest in making our website better known. The legal basis for the use of the following social media plug-ins is our legitimate interests in accordance with Art. 6 (1) (f) GDPR.

1. Google+ button

Our website uses the Google+ plug-in. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). The plug-in can be identified by the Google+ logo. In this context, your IP address is recorded, which of our websites you have visited, and possibly other data that Google can determine in connection with the connection. If you are logged in to a Google account, Google can also assign the website visit to your Google account. The personal data collected is stored on servers in the USA. Google has joined the EU/US PrivacyShield and thus meets the requirements of the European Union to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/US PrivacyShield can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active . For more information about how Google handles your personal data, please see Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/ .

2. Facebook plugins

We use functions of the social network Facebook on our website. Facebook enables participants of the social network to communicate and interact in order to exchange opinions and experiences or to publish information. The provider of the platform is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the processing of personal data of individuals in the EU.

Facebook has joined the EU/US Privacy Shield Agreement, thereby committing to complying with European data protection standards and thus meeting the EU's requirements to legitimize the transfer of personal data to the USA. Information on Facebook's commitment can be found at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .

Information about the collection, processing and use of personal data by Facebook can be found in the data policy available at https://www.facebook.com/about/privacy/update . This also contains setting options for protecting your privacy and methods for preventing data from being transmitted to Facebook. An overview of the available Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE .

3. Instagram Follow Button

Our website uses the Instagram follow button. The provider is Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter "Instagram"). The plug-in can be recognized by the Instagram logo or the follow button. In this context, your IP address, which of our websites you have visited, and possibly other data that Instagram can determine in connection with the connection are recorded. If you have a logged in Instagram account, Instagram can also assign the website visit to your Instagram account. The personal data collected can be stored on servers in the USA. For more information on how Instagram handles your personal data, please see the privacy policy https://help.instagram.com/155833707900388 .

4. Twitter Tweet button

Our website uses the Twitter plug-in. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA or Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The plug-in can be identified by the Twitter logo. In this context, your IP address is recorded, which of our websites you have visited, and possibly other data that Twitter can determine in connection with the connection. If you have a logged in Twitter account, Twitter can also assign the website visit to your Twitter account. The personal data collected is stored on servers in the USA. Twitter has joined the EU/US Privacy Shield and thus meets the requirements of the European Union to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/US Privacy Shield can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active . For more information on which settings in your Twitter account you can use to protect your privacy, see http://twitter.com/account/settings . For more information on how Twitter handles your personal data, see Twitter's privacy policy at http://twitter.com/privacy .

VIII. Rating platforms

Trusted Shops

Our website uses the Trusted Shops Trustbadge. The provider is Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (hereinafter "Trusted Shops"). The Trustbadge displays the Trusted Shops seal of approval and our ratings. When the Trustbadge is called up, personal data such as IP address, date and time of retrieval, amount of data transferred and the requesting provider are automatically processed and the retrieval is documented. This access data is not evaluated and is automatically deleted no later than 7 days after the end of your visit to the site. The legal basis for the use of the Trustbadge from Trusted Shops is our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 lit. f GDPR.

Further personal data will only be transferred to Trusted Shops if you have consented to this, if you decide to use Trusted Shops products after completing an order, or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

Further information on how Trusted Shops handles your personal data can be found in the Trusted Shops privacy policy: https://www.trustedshops.de/impressum/ .

IX. Media content

As part of our website, we sometimes use third-party content that is loaded directly from the servers of the providers named below. The purpose of integrating this content is to make our website more attractive. In order to make our website more attractive, we also have a legitimate interest in using such third-party content. The legal basis for using the following social media plugins is our legitimate interests in accordance with Art. 6 (1) (f) GDPR.

YouTube

Our website uses media content from the YouTube platform. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). The purpose is to display content from the YouTube platform as part of our website. This service records your IP address and possibly other data required by Google for YouTube. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. If you are logged in to YouTube at the same time, Google can assign your visit to our website directly to your user account there. If you do not want Google to be able to assign the data collected on our website to your respective YouTube user account, you must log out of YouTube first.

For more information about how Google handles your personal data, please see Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/ .