Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means all data that can be used to identify you personally.

1.2 The data controller responsible for processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Izonn GmbH, Senator-Braun-Allee 9, 31135 Hildesheim, Germany, Tel.: +49 3221 2292585, Email: shop@Izonn.com The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The data is processed pursuant to Art. Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to review the server log files retrospectively if concrete indications of unlawful use become known.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the lock icon in your browser bar.

3) Hosting and Content Delivery Network

Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files, such as graphics, page content or scripts, more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website under Art. 6(1)(f) GDPR. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prevents unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

4) Cookies

To make your visit to our website more appealing and enable the use of certain features, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is also processed through individual cookies implemented by us, such processing is carried out either under Art. 6(1)(b) GDPR for the performance of the contract, under Art. 6(1)(a) GDPR where consent has been given, or under Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set and to decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or in general.

Please note that our website's functionality may be limited if you do not accept cookies.

5) Contacting us

5.1 Zendesk

This website uses a live chat system provided by: Zendesk Inc., 1019 Market St, San Francisco, USA

The personal data transmitted during the chat is processed either under Art. 6(1)(b) GDPR, insofar as this is necessary to initiate or perform the contract, or under Art. 6(1)(f) GDPR on the basis of our legitimate interest in effectively assisting visitors to our website. Unless statutory retention obligations require otherwise, your submitted data will be deleted once the relevant matter has been fully resolved. In addition, further information may be collected and evaluated using cookies to create pseudonymized usage profiles.

However, this information is not used to identify you personally and is not combined with other datasets. If this information can be linked to an individual, it is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistically analyzing user behavior for optimization purposes.

You can prevent cookies from being set by changing your browser settings accordingly. However, this may restrict the functionality of our website. You may object at any time, with effect for the future, to the collection and storage of data for the purpose of creating a pseudonymized usage profile.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents its unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

5.2 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne

We transmit your email address and, where applicable, other customer data to the provider solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, so that the provider can contact you by email with a review reminder.

You may withdraw your consent at any time, effective for the future, by contacting us or the provider.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents its unauthorized disclosure to third parties.

5.3 Zendesk

To handle customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland

If you contact us by email through our website, your inquiries are stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can check the current status of your inquiry at any time using the individually assigned ticket number.

To organize and handle inquiries, personal data is collected according to the scope of the information provided, and in any case including first name, last name, and email address. This data is transmitted to the provider, where it is stored and processed.

The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your inquiry as quickly as possible, and optimizing our service offering in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

5.4 - Custom form for price proposals
On our website, we offer customers the opportunity to submit a price proposal for selected items they wish to purchase via an electronic form. In accordance with Art. 6(1)(b) GDPR, when the form is submitted electronically, we collect and store certain personal data of the person making the inquiry (such as their name and email address) to process the price proposal, and use this data to subsequently inform the person making the inquiry whether the offer has been rejected or accepted, or to make a counteroffer. The data provided via the form is used strictly for the purpose of collecting and associating the price proposal and deciding whether to accept it, in view of the possible preparation of a contract. After a price proposal request has been fully processed, the personal data will be deleted unless statutory retention obligations prevent this.
- Make an offer
On this website, you can use Buraleo Limited's “Make an Offer” service, Suite 2, Ground Floor Orchard Brae House, Edinburgh, Eh4 2hs, United Kingdom (“Make an Offer”), to submit price proposals for items for sale.
The user's name, email address, telephone number, if applicable, and delivery address are requested and, if the price proposal is submitted, first transmitted to Make an Offer and then to the aforementioned controller, enabling it to respond to the price proposal, i.e., accept it, reject it, or make a counteroffer.
Data is processed on the basis of Art. 6(1)(b) GDPR. Processing only takes place insofar as necessary for the purpose of initiating and fulfilling the contract. After an offer request has been fully processed, your data will be deleted unless statutory retention periods prevent this.
If data is transferred to Buraleo Limited in the United Kingdom, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For more information about the privacy policy of "Make an Offer," visit https://makeofferapp.herokuapp.com/static/private_policy.

5.5 Personal data is collected when you contact us (e.g. via the contact form or by email). The data collected when using a contact form can be seen in the relevant contact form. This data is stored and used exclusively to respond to your inquiry or to contact you and for the associated technical administration.

The legal basis for data processing is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is intended to conclude a contract, the additional legal basis for processing is Art. Art. 6 para. 1 lit. b GDPR. Your data will be deleted once your inquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations apply.

6) Data processing when opening a customer account and for contract fulfillment

Pursuant to Art. Pursuant to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. You can find the data required to open an account in the input form on the relevant form on our website. You may delete your customer account at any time by sending a message to the controller at the address above. After your customer account is deleted, your data will be erased, provided that all contracts concluded through it have been fully completed, no statutory retention periods apply, and we have no legitimate interest in continuing to store it.

7) Comment function

When using the comment function on this website, in addition to your comment, information about when the comment was created and the commenter name you chose is stored and published on the website. Your IP address is also logged and stored. This IP address is stored for security reasons, in case the person concerned violates the rights of third parties or posts unlawful content through a comment. We need your email address to contact you if a third party objects to your published content as unlawful. The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if third parties object to them as unlawful.

8) Use of customer data for direct marketing

8.1 Subscribe to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing any other information is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will send you an email newsletter only after you have expressly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to confirm, by clicking the relevant link, that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store the IP address assigned to you by your Internet service provider (ISP), as well as the date and time of your subscription, so that we can trace any possible misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for sending promotional communications via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a message to the controller named above. Once you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this in a manner permitted by law and described in this notice.

8.2 Sending newsletters to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly email you offers for similar goods or services to those you have already purchased. Under Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain your separate consent for this. The data is processed solely on the basis of our legitimate interest in personalized direct advertising under Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails. You may object to the use of your email address for the above-mentioned advertising purpose at any time, with effect for the future, by notifying the controller named at the beginning of this document. You will only incur transmission costs at the basic rates. Once we receive your objection, we will immediately stop using your email address for advertising purposes.

8.3 MailChimp

Our email newsletters are sent through this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass the data you provided when subscribing to the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that it can send the newsletter on our behalf.

Subject to your explicit consent under Art. 6(1)(a) GDPR, the provider also performs a statistical analysis of the success of newsletter campaigns by using web beacons or tracking pixels in the emails sent, which can be used to measure open rates and specific interactions with newsletter content. Device information (e.g. time of page access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other datasets.

You may withdraw your consent to newsletter tracking at any time, with effect for the future.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary to process the contract for delivery and payment purposes, the personal data we collect is passed on to the contracted transport company and the contracted financial institution in accordance with Art. 6(1)(b) GDPR.

If, under a corresponding contract, we are required to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (name, address, email address) to inform you personally, using suitable means of communication (e.g. by post or email), about upcoming updates within the legally prescribed period as part of our legal information obligations under Art. 6 (1) lit. c GDPR. Your contact details are used exclusively to inform you about updates we are required to provide and are processed for this purpose only to the extent necessary for the information in question.

To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling contracts. Certain personal data is transmitted to these service providers in accordance with the information below.

9.2 Disclosure of Personal Data to Shipping Service Providers

-DHL

We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

Before the goods are delivered, we will share your email address and/or telephone number with the provider in accordance with Art. 6(1)(a) GDPR for the purpose of coordinating a delivery time or notifying you of the delivery, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery and in accordance with Art. 6(1)(b) GDPR, we will share only the recipient's name and delivery address with the provider. This information will be shared only to the extent necessary to deliver the goods. In this case, it is not possible to coordinate a delivery time with the provider in advance or to notify you of the delivery.

You may withdraw your consent at any time, with effect for the future, by contacting the controller named above or the provider.

9.3 Use of payment service providers

-Amazon Pay

The following provider's online payment methods are available on this website: Amazon Payments Europe sca, 38 avenue John F. Kennedy, L-1855 Luxembourg

If you select a payment method offered by the provider that requires you to pay upfront (e.g. credit card payment), your payment data provided during the order process (including your name, address, bank and payment card details, currency and transaction number) and information about the contents of your order will be shared with the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
Apple Pay
If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function on your device running iOS, watchOS or macOS by charging a payment card stored in “Apple Pay.” Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Therefore, to authorize a payment, you must enter a code you previously set and verify it using your device’s “Face ID” or “Touch ID” function.
For the purpose of processing payments, the data you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider for the payment card stored in Apple Pay for payment processing. Encryption ensures that only the website on which the purchase was made can access the payment information. Once the payment is complete, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in connection with the transfers described, it is processed exclusively for the purpose of processing payments in accordance with Art. 6(1)(b) GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely prevents the data from being linked to an individual. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store this information in a format that could identify you. You can disable the use of Apple Pay on your Mac in your iPhone settings. To do so, go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information about data protection with Apple Pay can be found at the following web address: https://support.apple.com/en-gb/HT203027
- giropay

The following provider's online payment methods are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main

The following provider's online payment methods are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider under which the provider pays in advance (such as purchase on account, payment in installments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, if applicable, details of alternative payment methods).

To protect our legitimate interest in determining our customers' ability to pay, we share this data with the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. Using the personal data you provide and other data (such as shopping cart contents, invoice amount, order history and payment behavior), the provider checks whether the payment method you selected can be approved in view of the risk of non-payment and/or default.

In addition to the provider's own criteria, identity and creditworthiness information from the following credit agencies may also be taken into account when making a decision as part of the application review, in accordance with Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit check may contain probability values (so-called score values). Where score values are included in the credit check results, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but is not limited to, address data.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may continue to be entitled to process your personal data if this is necessary to process the payment in accordance with the contract.
- Mollie

The following provider's online payment methods are available on this website: Mollie BV, Keizersgracht 313, 1016 EE Amsterdam, Netherlands

The following providers' online payment methods are available on this website: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider that requires you to make an advance payment, your payment details provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order will be shared with the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method offered by the provider that allows the provider to pay upfront, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of alternative payment methods).

The following providers' online payment methods are available on this website: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg

The following provider's online payment methods are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

10) Online marketing

10.1 Google AdSense

This website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland (“Google”). Google AdSense uses so-called cookies, text files that are stored on your computer and enable analysis of your use of the website. In addition, Google AdSense also uses so-called web beacons (small invisible graphics) to collect information. These can be used to record, collect and analyze simple activities, such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transferred to and stored on a Google server. This may also involve transfer to the servers of Google LLC. in the USA.

Google uses the information obtained in this way to evaluate your use of this website with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google's behalf.

All processing described above, in particular the reading of information on the device being used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the site.

You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please deactivate this service in the “Cookie Consent Tool” provided on the website.

You can find more information about Google's privacy policy at: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in

10.2 ADCELL partner program

We participate in the partner program of the following provider: ADCELL” Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany

In this context, we have placed links on our website that lead to offers on the provider's or third parties' websites (“affiliate sites”).

To measure the success of an affiliate link, analyze the orders generated through it, and settle the corresponding commission payments, the provider uses cookies and/or similar technologies, which are generally set on the affiliate sites and for which we are therefore not responsible under data protection law. In doing so, the provider also regularly processes the IP address and, where applicable, other device information.

All processing described above, in particular the reading or storage of information on your device, only takes place if you have expressly consented in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by using the cookie consent management tool on the partner sites.

10.3 AWIN performance advertising network

We participate in the partner program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

10.4 Sober

We use the services of the following provider for our voucher offers: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe

The provider operates a voucher network through which participating partner shops can create vouchers and distribute them to their customers. For this purpose, we forward your data, which is required to issue your voucher, to the provider in encrypted form. The data is only forwarded to the provider after you have completed your purchase and clicked on the voucher banner. This data is transferred solely to pre-fill the fields for issuing the voucher.

The data processing described above is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in having third parties advertise to you, allowing you to benefit from their offers by redeeming the vouchers.

11) Web analytics services

11.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze website usage.
When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of the website. The information collected by cookies about your use of this website (including the IP address transmitted by your device, shortened by omitting the last few digits, see below) is generally transmitted to and stored and processed on a Google server. This may also involve the transfer of information to the servers of Google LLC, based in the USA, where the information is further processed.
When Google Analytics 4 is used, the IP address transmitted by your device when you use the website is automatically collected and processed in anonymized form only by default, so that the information collected cannot be directly linked to an individual. This automatic anonymization is performed by Google truncating the last digits of the IP address transmitted by your device within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, compile reports about your website activities and usage behavior, and provide us with other services related to your website and internet use. In this context, the IP address transmitted by your device as part of Google Analytics is truncated and is not combined with other data held by Google. Data collected through the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics about website users’ age, gender, and interests through a special feature known as “demographic characteristics,” based on an analysis of interest-based advertising and information from third parties. This makes it possible to identify and distinguish groups of website users in order to target marketing measures. However, data collected through “demographic characteristics” cannot be attributed to any specific person, and therefore cannot be attributed to you personally. Data collected through the “demographic characteristics” feature is stored for two months and then deleted.
All of the processing described above, in particular the setting of Google Analytics cookies to store and access information on the device you use to access the website, takes place only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Google Analytics will not be used while you are using the website without your consent. You may withdraw your consent at any time with effect for the future. To withdraw your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
As an extension of Google Analytics 4, this website may also use the “Google Signals” service. Google Signals allows Google to generate cross-device reports (so-called “cross-device tracking”). If you have enabled “personalized advertising” in your Google account settings and linked your internet-enabled devices to your Google account, Google may analyze user behavior across devices and create database models based on it, provided that you have consented to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR (see above). This takes into account the logins and device types of all website visitors who were logged into a Google account and completed a conversion. Among other things, the data can show which device you first clicked an ad on and which device the corresponding conversion took place on. If Google Signals is used, Google does not provide us with any personal data, only statistics generated on the basis of Google Signals. You can disable the “personalized advertising” feature in your Google account settings and thereby stop cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
You can find more information here: https://support.google.com/analytics/answer/7532985?hl=de
As an extension of Google Analytics 4, this website may also use the “User IDs” feature. By assigning unique User IDs, we can have Google generate cross-device reports (so-called “cross-device tracking”). This allows your usage behavior to be analyzed across devices if you have given your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, created a personal account by registering on this website, and are logged into your personal account on various devices using your corresponding login credentials. Among other things, the data collected in this way can show which device you first clicked an ad on and which device the corresponding conversion took place on.
We have entered into a so-called data processing agreement with Google for the use of Google Analytics 4, obligating Google to protect the data of our website users and not to disclose it to third parties.
To ensure compliance with the European level of data protection in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google relies on the European Commission’s so-called Standard Contractual Clauses, which we have agreed with Google contractually.
Further legal information about Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=en
Details of the processing triggered by Google Analytics 4 and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

11.2 Cloudflare Web Analytics

This website uses the web analytics service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, to evaluate this data for statistical analyses of user behavior on our website and create pseudonymized usage profiles. This enables, among other things, the analysis of movement patterns (so-called heat maps), which show how long visitors stay on pages and how they interact with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymization generally prevents data from being directly associated with a specific person. Your personal data is not combined with data collected by other means.

All of the processing described above, in particular the reading or storage of information on the device you use, only takes place if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

11.3 This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

Google Tag Manager provides the technical basis for combining various web applications, including tracking and analytics services, and calibrating, controlling and configuring them through a unified user interface.
Google Tag Manager itself does not store any information on users’ devices or read any information from them. The service also does not perform any independent data analyses.
However, when you visit a page, Google Tag Manager transmits your IP address to Google and may store it there. It is also possible that the data will be transmitted to servers of Google LLC. in the USA.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

12) Retargeting / Remarketing / referral advertising

12.1 Facebook Pixel for creating custom audiences with Advanced Matching (with cookie consent tool)
Our online offering uses the so-called “Facebook Pixel” of the social network Facebook in Advanced Matching mode, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Facebook”).
If a user who has given their explicit consent clicks on an ad we have placed and that is displayed on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. This URL parameter is then written to the user’s browser via a cookie after redirection, which is set by our linked page itself. In addition, this cookie collects specific customer information, such as the email address that we collect on our website connected to Facebook for transactions such as purchases, account sign-ins, or registrations (Advanced Matching). The cookie is then read by Facebook Pixel, enabling the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook Pixel with Advanced Matching, Facebook can identify visitors to our online offering as a target audience for displaying ads (so-called “Facebook Ads”). Accordingly, the Facebook Ads we run are shown only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined based on the websites they have visited) that we transmit to Facebook (so-called “Custom Audiences”). We also want to use the Facebook Pixel to ensure that our Facebook Ads match users’ potential interests and are not intrusive. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users are redirected to our website after clicking on a Facebook ad (“conversion”). Compared with the standard version of the Facebook Pixel, the Advanced Matching feature helps us better measure the effectiveness of our advertising campaigns by recording more related conversions.
All data transmitted is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes, in accordance with Facebook's Data Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve ads on and off Facebook.
This processing is carried out on the basis of your explicit consent under Art. 6(1)(a) GDPR.
Only users over the age of 13 may consent to the use of the Facebook Pixel. If you are younger, please ask your parents or legal guardians for permission.
The information generated by Facebook is generally transmitted to and stored on a Facebook server. This may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can withdraw your consent at any time, with effect for the future. To withdraw your consent, uncheck the box next to the “Facebook Pixel” setting in the “Cookie Consent Tool” integrated into the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

12.2 idealo Performance Tracking

This website uses the tracking technology of Ingenious Technologies AG, Französische Straße 48, 10117 Berlin (“Ingenious”), to establish a connection between a click on or display of an advertisement (touchpoint) and an action you perform (e.g., a purchase in an online shop or a newsletter subscription). At each touchpoint, your browser sends an HTTP request to the Ingenious server, which in turn transmits certain information.
This information includes the URL of the website on which the advertisement is displayed (referrer URL), the device's browser identifier (user agent) (including information about the device type and operating system), the device's IP address (Ingenious anonymizes this IP address before storing it), HTTP headers (data packets automatically transmitted by your browser containing various technical information), the time of the request and, if already stored on the device, the cookie with its full contents.

A cookie is a small data packet exchanged between your browser and the server. This data packet can be used to store and transmit information relevant to the web application, such as the contents of a virtual shopping cart.
Cookies are placed on your device using tracking technology to document activities. The cookie stores information about the most recently used touchpoints (i.e., when an advertisement was displayed on or clicked from a device). The cookie also contains a cookie ID generated by Ingenious. Ingenious uses the cookie ID to store data about the touchpoints used and information about your activities. The recorded touchpoints can be combined into a user journey if required.
In the event of a promotional inquiry, the order number and shopping cart value of your order are generally also transmitted to and stored by Ingenious. The following data may also be transmitted and stored: your customer number, new customer status, your age and gender, and your responses to a customer survey.

The information transmitted to Ingenious and the cookies are used solely to correctly attribute the success of an advertising material to the corresponding billing.
All processing described above, in particular the retrieval of information from the end device in use via the tracking pixel, takes place only if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without this consent, idealo Performance Tracking will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To withdraw your consent, please disable this service in the “Cookie Consent Tool” provided on the website.
The collection and processing of tracking data can also be prevented by visiting the tracking opt-out page listed below:
https://marketing.net.idealo-partner.com/ts/i5040718/tsv?settrackingoptout

When you visit the tracking opt-out page, a special cookie is written that disables tracking in the respective web browser on the device. However, tracking will be re-enabled as soon as you delete the tracking opt-out cookie.

Below, we inform you about which cookies our tracking technology uses:

A cookie named “tsv” is set every time an advertising material is displayed. This cookie contains a cookie ID and a list of data about the most recent view touchpoints, consisting of the time, referrer URL, and the Admedia code (a unique identifier for an advertising material that contains information about the sales channel, publisher, publisher website, and advertising material).

The cookie named “tsc” is set every time an advertising material is clicked. This cookie contains a cookie ID and a list of data about the most recent click touchpoints, consisting of the time, referrer URL, page ID in the customer’s shop system, and the Admedia code (a unique identifier for an advertising material that contains information about the sales channel, publisher, publisher website, and advertising material).

The cookie named “trackingoptout” is written when the opt-out link is clicked to disable tracking for the current web browser on this device.

12.3 Google Ads Remarketing

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). We can determine how successful individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that interests you, make our website more appealing to you, and ensure fair calculation of the resulting advertising costs

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize whether the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.

Details on the processing initiated by Google Ads conversion tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All of the processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google conversion tracking will not be used during your visit to the website.

You can permanently disable the setting of cookies by Google Ads conversion tracking for ad preferences. To do so, you can download and install the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Please note that certain features of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

Further information on Google’s privacy policy can be found at:
https://www.google.com/policies/technologies/ads/

12.4 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This enables us to target visitors to our website who have already shown an interest in our shop and products with personalized, interest-based advertising. The advertising materials are displayed based on a cookie-based analysis of past and current user behavior; no personal data is stored. With retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertising to the information stored. These cookies are small text files stored on your computer or mobile device. This means you are shown advertising that is highly likely to match your product and information interests.

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time, with effect for the future. To exercise your right to withdraw consent, please deactivate this service in the “Cookie Consent Tool” provided on the website.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

12,5 billiger.de Sales Tracking

This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany

If you reached our website via an advertisement on the provider’s domain, the success of the advertisement may be measured using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, possibly including your IP address, is read using tracking technology in order to record and evaluate user actions defined by us in advance (e.g., completed transactions, leads, searches on the website, visits to product pages). This allows us to compile statistics on user behavior on our website after users have been redirected from an advertisement, which we use to optimize our offerings.

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents unauthorized disclosure to third parties.

12.6 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine how successful individual advertising measures are in relation to the data from advertising campaigns. Our aim is to show you advertising that is of interest to you, make our website more interesting for you, and achieve fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users.
When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details about the processing triggered by Google Ads conversion tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites.

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

You can also permanently object to Google Ads conversion tracking cookies being set by downloading and installing the Google browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

To target advertising more effectively to users whose data we have received in the course of business or business-like relationships, we use a customer match feature as part of Google Ads. To do so, we electronically transmit one or more files containing aggregated customer data (in particular, email addresses and telephone numbers) to Google. Google does not have access to unencrypted data, but automatically encrypts the information in the customer files during transmission using a special algorithm. Google can then use the encrypted information only to match it with existing Google accounts belonging to the individuals concerned. This makes it possible to display personalized advertising across all Google services linked to the respective Google account.

Customer data is only transmitted to Google if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future. Further information about Google’s privacy measures in connection with the Customer Match feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
You can view Google’s privacy policy here: https://policies.google.com/privacy

12.7 Kelkoo Sales Tracking

This website uses the conversion tracking technology of the following provider: Kelkoo Group, Parc Sud Galaxie, 6 rue des Méridiens, 38130 Échirolles, France

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents unauthorized disclosure to third parties.

12.8 Microsoft Advertising Universal Event Tracking

This website uses the conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents unauthorized disclosure to third parties.

12.9 shopping24 Conversion Tracking

This website uses the conversion tracking technology of the following provider: shopping24 Gesellschaft für multimediale Anwendungen mbH, Poßmoorweg 2
22301 Hamburg, Germany

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prevents unauthorized disclosure to third parties.

13) Site features

13.1 Sign in with Amazon

We provide a single sign-on function on our website from the following provider: Amazon EU S.arl, 38 Avenue John F. Kennedy, L-1855, Luxembourg

In addition to data transfers to the provider location mentioned above, data may also be transferred to: Amazon.com Inc, USA

If you have an account with the provider, you can use your account details to create a user account or register on our website.

When you visit this page, this login function may establish a direct connection between your browser and the provider’s servers, even if you do not have an account with the provider or are not currently logged in. This allows the provider to learn that you have visited our page. The information collected in this process (including your IP address, where applicable) is transmitted directly from your browser to a provider server and stored there. However, the information is not used to identify you personally and is not shared with third parties.

These data processing operations are carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in making our online presence user-friendly and interactive.

If you log in to the provider’s website using your account details by clicking the registration button, the provider will transmit the general and publicly available information stored in your account (username, name, address, email address, age, and gender) to us based on your explicit consent in accordance with Art. 6(1)(a) GDPR.

We store and use the data transmitted by the provider to set up a user account with the required information (form of address, first name, last name, address details, country, email address, date of birth), provided you have authorized the provider to share this data. Conversely, we may transfer data (e.g., information about your browsing or purchasing behavior) to your account with the provider based on your consent.

Consent once granted may be withdrawn from us at any time with effect for the future.

13.2 EHI seal of approval widget

Our website includes graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne

When you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers so that the elements can load correctly. Certain browser information, including your IP address, is transmitted to the provider in the process.

If personal data is processed in this context, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and designing our website attractively.

13.3 Trustami Trust Seal

Our website includes graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: Trustami GmbH, Schröderstraße 5, 10115 Berlin

13.4 Trusted Shops Trustbadge

Our website includes graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne

13.5 reCAPTCHA

We use the CAPTCHA service of the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. The provider uses “Google Fonts,” fonts downloaded from the internet from Google, for the visual design of the CAPTCHA window. No further information is processed apart from the information mentioned above, which is already transmitted to Google through the functionality of ReCaptcha.

The service checks whether an entry is made by a natural person or whether it is made fraudulently through machine-based and automated processing, with the aim of blocking spam, DDoS attacks, and similar automated malicious attacks. To ensure that an action is performed by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device being used, browser identification data, the operating system type, and the date and duration of the visit, and transmits this data to the provider's servers for analysis.

This process is based on our legitimate interest in determining individual responsibility for internet use and preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.

14) Tools and Miscellaneous

14.1 This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users in the form of an interactive user interface when they visit the site, where they can give consent for certain cookies and/or cookie-based applications by checking boxes. The tool only loads cookies/services that require consent if the relevant user has given consent by checking the corresponding boxes. This ensures that such cookies are only placed on the user’s device if consent has been given.
The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed.
If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done on the basis of Art. 6(1)(lit. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific, and user-friendly cookie consent management and, accordingly, in ensuring that our website is designed in compliance with the law.
An additional legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally required to make the use of cookies that are not technically necessary dependent on the respective user’s consent.
Further information about the operator and the settings available for the cookie consent tool can be found directly in the relevant user interface on our website.

14.2 Cloudflare

For security reasons, this website uses the services of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

The provider protects the website and its associated IT infrastructure against unauthorized access by third parties, cyberattacks, viruses, and malware. The provider collects users’ IP addresses and, where applicable, other data about their behavior on our website (in particular, URLs visited and header information) in order to identify and prevent unlawful access to the site and potential threats. The collected IP address is checked against a list of known attackers. If the collected IP address is identified as a security risk, the provider may automatically block access to the website. The information collected in this way is transmitted to and stored on a server operated by the provider.

The data processing described is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website against malicious cyberattacks and maintaining the integrity and security of its structure and data.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

14.3 FINDOLOGIC

This website uses the search technology service of the following provider: FINDOLOGIC GmbH, Jakob-Haringer-Straße 5a, 5020 Salzburg, Austria

To provide the article search function via the search field, as well as navigation and filtering, the provider collects and stores certain user information (such as the user or session ID) in anonymized form.

If personal data is also processed in this context, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a fault-tolerant product search and thereby optimally marketing our offerings.

15) Data subject rights

15.1 The applicable data protection law grants you comprehensive rights as a data subject against the controller with regard to the processing of your personal data (rights of access and intervention), which we explain below:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Retention period for personal data

The period for which personal data is stored depends on the applicable legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent under Art. 6(1)(a) GDPR, it is stored until the data subject withdraws their consent.

Where statutory retention periods apply to data processed in connection with legal or similar obligations on the basis of Art. This data is routinely deleted in accordance with Art. 6(1)(b) GDPR once the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in further storage.

When personal data is processed on the basis of Art. This data is stored in accordance with Art. 6(1)(f) GDPR until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it is stored until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise stated in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.