Privacy Policy

With this privacy policy, we inform you as the data controller in accordance with the requirements of Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) about the nature, scope and purpose of the processing of personal data in connection with our website.

I. Definitions

(1) “Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

(2) “Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or other means of making available, matching or linking, restriction, erasure or destruction;

(3) “Responsible person” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or of the Member States;

(4) “Recipient” means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;

II. General information

1. Person responsible for data processing

Horando Deutschland GmbH

Osterstrasse 3
30159 Hanover

Germany
Phone: +49 (0) 511 / 367 315 50
contact@horando.de

2. Contact details of the company data protection representative

We have not appointed a data protection representative and are not obliged to appoint one.

3. Legal bases

We process personal data on the basis of at least one of the following legal bases:

Consent of the data subject to the processing of personal data concerning him or her for one or more specific purposes (Art. 6 (1) p. 1 lit. a GDPR);
Fulfillment of a contract with the data subject or for the performance of pre-contractual measures that take place at the request of the data subject (Art. 6 para. 1 p. 1 lit. b GDPR);
Fulfillment of a legal obligation to which we are subject (Art. 6 para. 1 p. 1 lit. c GDPR);
Protect vital interests of the data subject or another natural person (Art. 6 para. 1 p. 1 lit. d GDPR);
Safeguarding our legitimate interests or those of a third party (Art. 6 para. 1 p. 1 lit. f GDPR)

In this privacy policy, we indicate below the respective legal basis of individual processing operations.

4. Disclosure of data to recipients

We disclose personal data to recipients (processors or other third parties) only to the extent necessary and only under one of the following conditions:

The data subject has consented to the disclosure;
The disclosure serves the fulfillment of contractual obligations or pre-contractual measures at the instigation of the data subject;
We are legally obligated to disclose;
The disclosure is based on legitimate interests of us or a third party.

5. Third countries

The transfer of personal data to a country or an international organization outside the European Union (EU) or the European Economic Area (EEA) takes place subject to legal or contractual permissions only in accordance with the conditions set out in Art. 44 et seq. GDPR. This means that an adequacy decision by the EU Commission pursuant to Art. 45 GDPR exists for the country in question, appropriate data protection safeguards exist pursuant to Art. 46 GDPR or binding internal data protection rules exist pursuant to Art. 47 GDPR.

6. Data subject rights

As a data subject, you have the following rights:

In accordance with Art. 15 GDPR, you can request information about your personal data processed by us; furthermore, you can request information regarding the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the origin of your data if it has not been collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about its details such as logic, scope and effects, the existence of the right to rectification or erasure of the data concerned, the right to restriction of processing or to object to such processing, the existence of the right to object to such processing, the right to object to such processing and the right to object to such processing. meaningful information about its details such as logic, scope and effects, the existence of a right to rectification or erasure of the data concerning you, the right to restrict processing or to object to such processing, the existence of a right to lodge a complaint with the supervisory authority; finally, you have a right to be informed whether personal data have been transferred to a third country or to an international organization and - if this is the case - about the appropriate safeguards in connection with the transfer;
in accordance with Art. 16 GDPR, you can request the immediate correction of incorrect or the completion of your personal data stored by us;
pursuant to Art. 17 GDPR, you may request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
in accordance with Art. 18 GDPR, you may request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, you need the data no longer required by us for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR, but it has not yet been determined whether our legitimate grounds for data processing override your interest;
in accordance with Art. 20 GDPR, you may request that the personal data you have provided to us be transferred to you in a structured, commonly used and machine-readable format or transferred to another controller;
pursuant to Art. 21 GDPR, you may object to the processing of your personal data if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising and the legal basis for the processing of the personal data is based on legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR;
in accordance with Art. 7 para. 3 GDPR, you may revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
pursuant to Art. 77 GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

If you would like to exercise the aforementioned data subject rights, you can contact us in this regard at any time using the contact details provided above.

7. Deletion and restriction of personal data

Unless otherwise regulated in this privacy policy for the individual case, personal data will be deleted if this data is no longer necessary for the purposes for which it was collected or otherwise processed and the deletion does not conflict with any statutory retention obligations. We also delete the personal data processed by us in accordance with Art. 17 GDPR upon request if the conditions provided for therein are met. If personal data is required for other and legally permissible purposes, it will not be deleted, but its processing will be restricted in accordance with Art. 18 GDPR. In the case of restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us for reasons of commercial or tax law. Thus, documents according to § 257 para. 1 nos. 2 and 3 of the German Commercial Code as well as § 147 para. 1 nos. 2, 3, 5 of the Regulation of Taxation are kept for 6 years, documents according to § 257 para. 1 nos. 1 and 4 of the German Commercial Code as well as § 147 para. 1 nos. 1, 4, 4a of the Regulation of Taxation for 10 years.

8. Cookies

Within the scope of our Internet offer, we use cookies. Cookies are small text files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.Wir setzen Session-Cookies ein, um während Ihres Besuchs auf unserer Seite zu erkennen, dass Sie einzelne Seiten unseres Internetangebotes bereits besucht haben. Auch werden durch solche Cookies bestimmte Funktionalitäten bereitgestellt. Session-Cookies werden nach dem Ende Ihres Besuchs auf unserem Internetangebot gelöscht.

We use session cookies to recognize during your visit to our site that you have already visited individual pages of our website. Certain functionalities are also provided by such cookies. Session cookies are deleted after the end of your visit to our website.

In addition, we also use temporary cookies to optimize the user-friendliness and statistical evaluation of the use of our offer, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you were already with us at an earlier point in time and which entries and settings you have made so that you do not have to enter them again.

The data processed by cookies is necessary for the aforementioned purposes to protect our resulting legitimate interests as well as those of third parties pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.

Most browsers accept cookies automatically. If you do not wish to do so, however, you can configure your browser so that no cookies are stored on your end device or a message always appears before a new cookie is created. A general objection to the use of cookies used for online marketing purposes can also be declared for a variety of services, for example, at http://www.youronlinechoices.com/ or the deactivation page of the network advertising initiative http://optout.networkadvertising.org. However, deactivating cookies may mean that you cannot use all the functions of our website.

III. Individual processing operations

1. Hosting

For the provision of our Internet offer, we use services of hosting companies, such as provision of web servers, storage space, database services, security services and maintenance services.

In doing so, we, or our hosting provider, process personal data of users of our website on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f GDPR.

2. Access data and log files

When you access our website or the individual pages, information is automatically sent to the server of our website by the browser on your end device. This information is stored in so-called log files by us or our hosting provider and deleted after 3 months at the latest.

The following information is stored:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer
Status codes and amount of data transferred
Name of your access provider

These data are processed for the following purposes:

Provision of the Internet offer including all functions and contents
Ensuring a smooth connection establishment of the website
Ensuring a comfortable use of our website
Ensuring system security and stability
Anonymized statistical analysis of the accesses
Website optimization
Disclosure to law enforcement authorities if there has been an unlawful intrusion/attack on our systems
other administrative purposes

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest derives from the purposes for data collection outlined above. In no case do we use the collected data for the purpose of drawing conclusions about a person.

3. Contact form / Other contact

If you use the contact form, you will be asked to provide your name and e-mail address and, if applicable, other contact details so that we can get in touch with you personally. Further information can be provided voluntarily. Data processing for the purpose of contacting us and responding to your request is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent. All personal data collected in connection with the contact form will be deleted after your request has been dealt with, unless storage is required for the documentation of other processes (e.g. subsequent conclusion of a contract).

If you contact us using the contact data published on our website (e.g. by e-mail) and provide us with personal data, we will only use this data to process your request and will then delete it.

4. E-mail direct mail to customers

If you are a customer of ours and have received your e-mail address in connection with the sale of a good or service, we may use your e-mail address for direct marketing of our own similar goods or services. This only applies if you have not objected and we clearly inform you of the possibility of objection when collecting the e-mail address and each time it is used. The legal basis for the processing is our legitimate interest in direct marketing according to Art. 6 para.1 lit. f GDPR.

5. Newsletter

If you would like to receive our newsletter, we need your e-mail address. The data processing for the purpose of sending the newsletter is carried out according to Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent by means of the so-called double opt-in procedure. The e-mail address will be used and stored for this purpose until you revoke your consent or unsubscribe from receiving the newsletter. Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your revocation/unsubscribe request at any time to the e-mail address mentioned under point II.

We send our newsletters with a so-called tracking pixel. A tracking pixel is a miniature graphic that is embedded in the HTML format of the sent newsletter to enable an analysis of reader behavior. In this context, we store whether and at what time a newsletter was opened by you and which of the links contained in the newsletter were called up by you. We use this data to create statistical evaluations of the success or failure of a marketing campaign in order to optimize newsletter distribution and to better tailor the content of future newsletters to your interests. The collected data is not passed on to third parties and is deleted after the statistical evaluation.

6. MailChimp

he newsletter is sent via MailChimp. The provider of MailChimp is Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (hereinafter "MailChimp"). MailChimp is used to send and evaluate the reach of our newsletters. For this purpose, your email address and, if applicable, other data required by MailChimp for the provision of the newsletter are processed on our behalf. The legal basis for processing by MailChimp is Art. 6 para. 1 lit. f GDPR and our legitimate interest in using a user-friendly and secure newsletter system.

The personal data collected is stored on servers in the USA. MailChimp has joined the EU/U.S. Privacy Shield and thus fulfills the requirements of the European Union to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/U.S. Privacy Shield can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.

For more information on how MailChimp handles your personal data, please see the related privacy policy: http://mailchimp.com/legal/privacy/.

7. Comments and contributions

If you leave comments or other contributions on our website, your e-mail and IP address will be stored on the basis of our legitimate interests in accordance with the Art. 6 para. 1 lit. f GDPR. Further information can be provided voluntarily. The purpose of storing your e-mail address is so that we can contact you regarding your comment or contribution, forward any objections to your contribution to you and, if necessary, ask you to comment. It is not possible to use the comment function without providing the e-mail address. The e-mail address provided will be stored, but not published with the comment. If you have a user account with us and are logged in, the contributions are internally linked to your user account so that you can track the history.

Our legitimate interest in the query and storage of the email address consists of security aspects, e.g. in the event that someone leaves illegal content in comments and posts (e.g. insults). In this case, we ourselves could be prosecuted for the comment or post and therefore have a legitimate interest in storing the IP address. This collected personal data is only passed on to law enforcement authorities in cases of criminal investigations. No other disclosure to third parties will take place.

8. Gravatar

Our website uses the Gravatar service. The provider is Automatic Inc, 60 29th Street #343, San Francisco, CA 94110, USA (hereinafter "Gravatar"). At Gravatar, you can register and save profile pictures as well as an e-mail address. If you leave posts or comments on other websites with this email address, your profile picture will be displayed in connection with this post. For this purpose, your e-mail address is transmitted to Gravatar in encrypted form, which also gives the provider knowledge of your IP address. The use of Gravatar is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, as we use Gravatar to give the author of the post the opportunity to personalize his or her post with a profile picture and thus also make our own offer more attractive. You can prevent the integration of your profile picture deposited with Gravatar by using an email address not known to Gravatar, by not using our commenting system or by logging out of Gravatar.

Automatic Inc. has joined the EU/US Privacy Shield agreement, has committed to comply with European data protection standards and thus fulfills the EU requirements for legitimizing the transfer of personal data to the USA. Information about the voluntary commitment of Automatic Inc. can be found at

https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active.

For more information on how Gravatar handles your personal data, please see the related privacy policy: https://automattic.com/privacy/.

9. Registration / User account

You have the option to register on our website by providing personal data. The registration is voluntary and takes place according to Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent. Which personal data is transmitted in the process is determined by the respective input mask used for registration. The personal data collected will be used for the purposes of our offer and to contact you for information relevant to the offer and registration. You can view your personal data and make changes to this data via a personal user access. Your data will be stored until you delete the user account or instruct us to delete your data. If we are obliged to store your personal data due to legal, in particular tax and commercial law retention periods, the processing of your personal data will be restricted accordingly until the retention periods expire and then this data will be deleted.

If you register on our website or use the user account, we store the IP address and the time of the respective usage action. The storage is based on our legitimate interests according to Art. 6 para. 1 p. 1 lit. f GDPR to provide our offer. The storage is also in your interest to protect you from misuse and other unauthorized use. The user account and the data stored in this context also serve in particular to facilitate shopping and to enable access to historical orders and the writing of customer reviews. As a matter of principle, this data is not passed on to third parties unless it is necessary for the fulfillment of contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR or for the pursuit of any claims to which we are entitled, or unless there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR. The IP addresses are anonymized or deleted after 3 months at the latest.

10. Contract data

In connection with and for the purpose of fulfilling pre-contractual measures and contractual obligations via our Internet offer, which take place at the request of the data subject, we process the data required for the fulfillment of the contract from the data subject. This includes:

Data of the contractual partner, such as name, address and contact data, if applicable different delivery or invoice addresses or recipients and, if necessary, the date of birth;
Contract data, such as subject matter of the contract, term, customer category;
Payment data such as bank details, credit card details, payment history.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b GDPR.

The data will be disclosed to third parties only to the extent necessary to fulfill pre-contractual measures and contractual obligations, e.g. to banks, payment service providers, credit card companies for the processing of payments and to shipping service providers for the shipment of goods.

IV. Online store and age verification

PrestaShop

Our online store uses the store system PrestaShop. The provider is PrestaShop S.A., 12 Rue d'Amsterdam, 75009 Paris (hereinafter "PrestaShop"). The data you enter in our online store is processed by PrestaShop on our behalf in accordance with Art. 28 GDPR.

For more information on how PrestaShop handles your personal data, please see the related privacy policy: https://www.prestashop.com/de/datenschutz.

V. Payment service provider

1. PayPal

This website uses PayPal as a payment service provider. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer and seller protection services. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, your name, email address, purchased products, invoice amount, as well as billing and delivery address will be disclosed to PayPal as part of the payment processing. When using the payment methods credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, PayPal may carry out a credit check to check creditworthiness and minimize payment defaults in order to decide on the release of the payment transaction. In the credit check, probability values are used (so-called score values), in the calculation of which address data are included. The calculation of these score values is based on a scientifically recognized mathematical-statistical procedure. In case of insufficient creditworthiness, PayPal may refuse the selected payment method. The legal basis of the processing is Art. 6 para. 1 lit. b GDPR.

If you do not agree with the data transfer or if you think that your creditworthiness is not suitable for the selected payment method, please use another payment method. For more information on how PayPal handles your personal data, please see the related privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

2. Sofortüberweisung

This Internet offer uses Sofortüberweisung as payment service provider. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, or Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "Klarna"). Sofortüberweisung assumes the function of an online payment service provider. When paying via Sofortüberweisung, your name, purchased products or services, invoice amount, as well as billing and delivery address are passed on to instant bank transfer as part of the payment processing. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR. For more information on how Sofortüberweisung handles your personal data, please see the relevant privacy policy: https://www.klarna.com/sofort/datenschutz/.

VI. Services from Google

The provider of the following Google services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").

The legal basis for the use of the following services of Google are our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

Google has joined the EU/US Privacy Shield agreement, thus committing to comply with European data protection standards and fulfilling the EU requirements for legitimizing the transfer of personal data to the USA. Information on Google's voluntary commitment can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Further information on how Google handles your personal data can be found in Google's privacy policy: https://www.google.com/intl/de/policies/privacy/. Information on the use of data for advertising purposes by Google, settings and opt-out options can be found on these websites:

https://www.google.de/policies/privacy/partners/

https://www.google.de/policies/technologies/ads/

http://www.google.de/settings/ads

http://www.google.com/ads/preferences/

1. Google Analytics

This website uses Google Analytics from Google. Google Analytics uses cookies. Google collects data about the visits of the users of our Internet offer and their usage behavior. This data serves the purpose of ensuring a needs-oriented design and the ongoing optimization of our Internet offer, to measure the success of marketing measures and to create statistical evaluations. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request are transmitted to a Google server in the USA and stored there. User and event data are deleted after 26 months. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible. You can prevent the storage of cookies by selecting the appropriate settings on your browser software. However, we point out that in this case you may not be able to use all features of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can prevent the collection by Google Analytics by clicking on the link Deactivate Google Analytics to obtain an opt-out cookie. This cookie ensures that in the future no visitor data from your browser will be collected and stored by Google Analytics when you visit this website. Please note: If you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you.

2. Demographic characteristics in Google Analytics

This website uses the "demographic characteristics" function as part of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of our site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. The legal basis for the use of the following services of Google are our legitimate interests to optimize and optimally market our internet offer according to Art. 6 para. 1 lit. f GDPR.

You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown above.

3. Google Analytics Remarketing

This website uses Google Analytics Remarketing from Google. Google Analytics Remarketing is used to present visitors with advertisements that relate to content on previously visited websites. Google uses cookies to recognize visitors who call up websites from the Google advertising network. This service collects your IP address, which of our web pages you have visited, and possibly other data required by Google to provide Analytics Remarketing. The IP address transmitted by your browser will not be merged with other data from Google under any circumstances. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. If you still do not wish to use Google's remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads.

4. Google AdWords with conversion tracking

This website uses Google AdWords from Google and, as part of Google AdWords, conversion tracking. Google conversion tracking is used to track and evaluate clicks on ads, purchases, registrations, phone calls, app downloads and other actions by you on our website. Cookies are used for analysis and evaluation. This service records your IP address, which of our internet pages you have visited and, if applicable, other data required by Google for the provision of conversion tracking. The IP address transmitted by your browser will not be merged with other data from Google under any circumstances. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

5. Google Maps

This website uses Google Maps from Google to display site plans, maps, terrain data or geographical maps. This service records your IP address, which of our Internet pages you have visited and, if applicable, further data required by Google for the provision of the maps (e.g. location data). The information generated is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. The terms of use for Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html.

6. Google Web Fonts

This website uses external fonts from Google, so-called web fonts, to display fonts. For this purpose, your browser loads the required web font into the browser cache when you call up the website. If your browser does not support this function, a standard font is used by your computer to display the web page. This service collects your IP address, which of our web pages you have visited, and possibly other data required by Google to provide the web fonts. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google.

VII. Social media plugins

We use social media plugins from social networks as part of our Internet offer. If a page of our Internet offer with such a plugin is called up, your browser establishes a direct connection with the server of the respective provider, whereby the respective provider receives knowledge of which page of our offer was called up and from which IP address. The same also applies to the actuation of the component, e.g. liking or sharing a content or commenting on a post. We use a 2-click solution for the integration of social media plugins. The described data transmission therefore only takes place with the activation click and not already when loading the page.

If you are logged into the social network of the respective provider at the same time, the respective provider can directly assign the visit to the page of our website to your user account there. If you click the button of the respective plugin, corresponding information is transmitted to the respective provider and published there as a post in the profile of your social network. If you do not want the provider to be able to assign the data collected on our website to your respective user account with the provider, you must first log out of the corresponding social network. The purpose of the plugins is to make our website better known and to share content from our website on social networks. Our legitimate interest lies in the purpose of making our website better known. The legal basis for the use of the following social media plugins are our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

1. Google+ button

Our website uses the Google+ plugin. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). The plugin is recognizable by the Google+ logo. In this context, your IP address is recorded, which of our internet pages you have visited, and possibly other data that Google can determine in connection with the connection. If you have a logged-in Google account, it is also possible for Google to assign the website visit to your Google account. The personal data collected is stored on servers in the USA. Google has joined the EU/U.S. Privacy Shield and thus fulfills the requirements of the European Union to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/U.S. Privacy Shield can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. For more information on how Google handles your personal data, please see Google's privacy policy: https://www.google.com/intl/de/policies/privacy/.

2. Facebook plugins

We use functionalities of the social network Facebook on our website. Facebook enables participants of the social network to communicate and interact, to exchange opinions and experiences or to publish information. The provider of the platform is Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the processing of personal data of individuals in the EU.

Facebook has joined the EU/US Privacy Shield agreement, thus committing to comply with European data protection standards and fulfilling the EU requirements for legitimizing the transfer of personal data to the USA. Information on Facebook's voluntary commitment can be found at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Information about the collection, processing and use of personal data by Facebook can be found in the data policy available at https://www.facebook.com/about/privacy/update. There, you will also find setting options for protecting your privacy as well as methods for preventing the transfer of data to Facebook. An overview of the available Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE .

3. Instagram follow button

Our website uses the Instagram Follow button. The provider is Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter "Instagram"). The plugin is recognizable by the Instagram logo or the Follow button. In this context, your IP address is recorded, which of our internet pages you have visited, and possibly other data that Instagram can determine in connection with the connection. If you have a logged-in Instagram account, it is also possible for Instagram to assign the website visit to your Instagram account. The personal data collected may be stored on servers in the USA. For more information on how Instagram handles your personal data, please see the privacy policy https://help.instagram.com/155833707900388.

4. Twitter tweet button

Our website uses the Twitter plugin. The provider is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA or Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The plugin is recognizable by the Twitter logo. In this context, your IP address is recorded, which of our internet pages you have visited, and possibly other data that Twitter can determine in connection with the connection. If you have a logged-in Twitter account, it is also possible for Twitter to assign the website visit to your Twitter account. The personal data collected is stored on servers in the USA. Twitter has joined the EU/U.S. Privacy Shield and thus fulfills the requirements of the European Union to legitimize the transfer of personal data to the USA. Information on the guarantees of the EU/U.S. Privacy Shield can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active. For more information on how to protect your privacy through your Twitter account settings, please visit: http://twitter.com/account/settings. For more information on how Twitter handles your personal data, please see Twitter's privacy policy http://twitter.com/privacy.

VIII. Evaluation platforms

Trusted Shops

Our website uses the Trusted Shops trust badge. The provider is Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (hereinafter "Trusted Shops"). The trust badge displays the Trusted Shops seal of approval and ratings from us. When the trust badge is called up, personal data such as IP address, date and time of the call-up, volume of data transferred and the requesting provider are automatically processed and the call-up is documented. This access data is not evaluated and is automatically deleted at the latest 7 days after the end of your visit to the site. The legal basis for the use of the trust badge of Trusted Shops are our legitimate interests in an optimal marketing of our offer according to Art. 6 para. 1 lit. f GDPR.

Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order, or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

For more information on how Trusted Shops handles your personal data, please refer to the Trusted Shops privacy policy: https://www.trustedshops.de/impressum/.

IX. Media content

Within the scope of our Internet offer, we sometimes use third-party content that is loaded directly from servers of the providers named in detail below. The purpose of integrating this content is to make our website more attractive. The purpose of making our website more attractive is also our legitimate interest in the use of such third-party content. The legal basis for the use of the following social media plugins are our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

YouTube

Our website uses media content from the YouTube platform. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). The purpose is to display content from the YouTube platform as part of our Internet offer. This service collects your IP address and possibly other data required by Google for YouTube. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. If you are logged into YouTube at the same time, Google can assign the visit to the page of our website directly to your user account there. If you do not want Google to be able to associate the data collected on our website with your respective user account on YouTube, you must first log out of YouTube.

For more information on how Google handles your personal data, please see Google's privacy policy: https://www.google.com/intl/de/policies/privacy/.