General
As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and by which you can be identified. In this privacy policy, we would like to explain to you in what manner, for what purpose and on what legal basis we process your data.
The controller responsible for the processing of data on this website and in our company is:
JS-Technik GmbH
Lether Gewerbestraße 10
26197 Großenkneten
Germany
Phone: +49 4435-9735500
Email: info@js-technik.de
General information
SSL and TLS encryption
Whenever you enter your data on websites, place online orders or send emails over the internet, you must always reckon with the possibility that unauthorised third parties may access your data. Complete protection against such access does not exist. However, we do everything we can to protect your data as well as possible and to close the security gaps as far as is possible for us.
An important protective mechanism is the SSL and TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognise the encryption by the padlock icon before the entered internet address in your browser and by the fact that our internet address begins with https:// and not with http://.
Encrypted payment transactions
Payment data, such as the account or credit card number, are particularly worthy of protection. For this reason, payment transactions using the usual means of payment are also carried out with us exclusively via an encrypted SSL or TLS connection.
How long do we store your data?
At some points in this privacy policy, we inform you about how long we, or the companies that process your data on our behalf, store your data. If no such indication is given, we store your data until the purpose of the data processing no longer applies, you object to the data processing or you withdraw your consent to the data processing.
In the event of an objection or withdrawal, however, we may continue to process your data if at least one of the following conditions is met:
- We have compelling legitimate grounds for continuing the data processing which override your interests, rights and freedoms (only in the case of an objection to the data processing; if the objection is directed against direct marketing, we cannot put forward legitimate grounds).
- The data processing is necessary for the establishment, exercise or defence of legal claims (does not apply if your objection is directed against direct marketing).
- We are legally obliged to retain your data.
In this case, we will delete your data as soon as the condition(s) no longer applies/apply.
Data transfer to the USA
On our website, we also use tools from companies that transfer your data to the USA and store and, where applicable, further process it there. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This establishes that the USA ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new safeguards and measures introduced by the USA in order to meet the data protection requirements. The adequacy decision includes, among other things, limitations and safeguards regarding access by US intelligence services to the data. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate for the protection of national security. In addition, enhanced oversight of the activities of the US intelligence services has been established to ensure that the limitations on surveillance activities are complied with. Furthermore, an independent redress mechanism has been set up to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection safeguards. You can view a list of all certified companies under the following link: https://www.dataprivacyframework.gov/s/participant-search
A change to the decision of the European Commission cannot be ruled out.
Your rights
Objection to the data processing
IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR THE PROCESSING OF YOUR DATA AND THEREFORE BASE THIS ON ART. 6(1) FIRST SENTENCE (F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO THIS. THIS ALSO APPLIES TO PROFILING THAT TAKES PLACE ON THE BASIS OF THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PUT FORWARD GROUNDS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. NO JUSTIFICATION IS REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.
THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:
- WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
- THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING CONNECTED WITH IT.
Further rights
Withdrawal of your consent to the data processing
Many data processing operations take place on the basis of your consent. You give this, for example, by ticking a corresponding box in online forms before you send the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7(3) GDPR). From the time of withdrawal, we may then no longer process your data. The only exception: we are legally obliged to retain the data for a certain period. Such retention periods exist in particular in tax and commercial law.
Right to lodge a complaint with the competent supervisory authority
If you are of the opinion that we are infringing the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You can contact a supervisory authority in the Member State of your residence, your place of work or the place where the alleged infringement took place. The right to lodge a complaint exists in addition to administrative or judicial remedies.
Right to data portability
Data that we process automatically on the basis of your consent or in performance of a contract must be handed over to you or a third party in a common, machine-readable format if you request this. We can only transfer the data to another controller insofar as this is technically feasible.
Right to information about, erasure of and rectification of data
You have the right under Art. 15 GDPR to obtain information free of charge about which personal data we have stored about you, where the data comes from, to whom we transfer the data and for what purpose it is stored. Should the data be incorrect, you have a right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may demand that we delete the data.
Right to restriction of processing
In certain situations, you may demand under Art. 18 GDPR that we restrict the processing of your data. The data may then – apart from being stored – only be processed as follows:
- with your consent
- for the establishment, exercise or defence of legal claims
- for the protection of the rights of another natural or legal person
- for reasons of an important public interest of the European Union or a Member State
The right to restriction of processing exists in the following situations:
- You have disputed the accuracy of your personal data stored by us and we need time to verify this. Here the right exists for the duration of the verification.
- The processing of your personal data is taking place unlawfully or was unlawful in the past. Here the right exists as an alternative to the erasure of the data.
- We no longer need your personal data, but you need it for the exercise, defence or establishment of legal claims. Here the right exists as an alternative to the erasure of the data.
- You have lodged an objection under Art. 21(1) GDPR and now your and our interests must be weighed against each other. Here the right exists as long as the result of the weighing has not yet been determined.
Hosting and Content Delivery Networks (CDN)
External hosting
Our website is hosted on a server of the following provider of internet services (hosting provider):
profihost GmbH
Hildesheimer Straße 25
30880 Laatzen
How do we process your data?
The hosting provider stores all data of our website. This also includes all personal data collected automatically or through your input. This may in particular be: your IP address, pages accessed, names, contact details and enquiries as well as meta and communication data. When processing the data, our hosting provider adheres to our instructions and only ever processes the data to the extent necessary to fulfil the performance obligation towards us.
On what legal basis do we process your data?
Since we address potential customers via our website and maintain contacts with existing customers, the data processing by our hosting provider serves the initiation and performance of the contract and is therefore based on Art. 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements regarding security, speed and efficiency. In this respect, we also process your data on the basis of Art. 6(1)(f) GDPR.
Data collection on this website
Use of cookies
Our website places cookies on your device. These are small text files that serve various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed in order to be able to carry out certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the advantages of a shopping cart in an online shop. Yet other cookies serve to analyse user behaviour or to optimise advertising measures. If we use third-party services on our website, e.g. for processing payments, these companies may also leave cookies on your device when you access the website (so-called third-party cookies).
How do we process your data?
Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they therefore disappear by themselves. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behaviour being analysed permanently. Via the settings in your browser, you can influence how it handles cookies:
- Do you want to be informed when cookies are set?
- Do you want to exclude cookies generally or for certain cases?
- Do you want cookies to be deleted automatically when the browser is closed?
If you deactivate or do not allow cookies, the functionality of the website may be limited.
Insofar as we use cookies from other companies or for analysis purposes, we will inform you about this within the framework of this privacy policy. We will also request your consent in this regard when you access our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device therefore takes place on the basis of Art. 6(1)(f) GDPR. We use all other cookies on the basis of Art. 6(1)(a) GDPR, provided you give us a corresponding consent. You can withdraw this at any time with effect for the future. If you consented to the placement of necessary and functional cookies when consent was requested, the storage of these cookies also takes place exclusively on the basis of your consent.
Cookie consent with Consent Manager
What is Consent Manager?
Consent management provider (CMP) for obtaining, processing and forwarding GDPR-compliant consents
Who processes your data?
Consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden
Where can you find further information about data protection at Consent Manager?
https://www.consentmanager.de/datenschutz/
How do we process your data?
We use Consent Manager in order to obtain your consent to the storage of cookies on your device and to document it in compliance with data protection regulations. When you visit our website and close the cookie window from Consent Manager with the request for consent, the following data is transmitted to the company:
- your IP address (from which your country is also determined)
- the browser used
- the language used
- the website accessed
In addition, Consent Manager stores various cookies in your browser in order to be able to assign the consents given or their withdrawal to your browser. All collected data is stored until the cookies are no longer needed, you delete the cookies from Consent Manager or you request us to delete the data. This does not apply only if we are legally obliged to retain the data.
On what legal basis do we process your data?
We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. In order to fulfil this obligation, we use Consent Manager. The legal basis for the data processing is therefore Art. 6(1)(c) GDPR.
Server log files
Server log files record all requests and accesses to our website and capture error messages. They also comprise personal data, in particular your IP address. However, this is anonymised by the provider after a short time, so that we cannot assign the data to your person. The data is automatically transmitted by your browser to our provider.
How do we process your data?
Our provider stores the server log files in order to be able to track the activities on our website and identify errors. The files contain the following data:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address (anonymised where applicable)
We do not merge this data with other data, but use it merely for statistical evaluation and to improve our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our website runs error-free. It is also our legitimate interest to obtain an anonymised overview of the accesses to our website. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.
Trusted Shops
What is Trusted Shops?
Review platform
Who processes your data?
Trusted Shops AG, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne
Where can you find further information about data protection at Trusted Shops?
https://www.trustedshops.com/de/legal/datenschutz[RRA[R1]
How do we process your data?
For this website, we use the services of Trusted Shops AG.
In this context, Trusted Shops widgets are embedded for the purpose of displaying the services provided (e.g. quality seal, collected reviews) as well as for offering Trusted Shops products to buyers after an order. This serves to safeguard our legitimate interests in optimal marketing by enabling a secure purchase, which prevail within the framework of a balancing of interests pursuant to Art. 6(1)(f) GDPR.
The Trustbadge is provided by a US CDN provider. When the Trustbadge is accessed, access data such as IP address, date, time, transmitted data volume and the requesting provider is stored in a server log file. The IP address is anonymised, and the data serves statistical purposes and error analysis.
After you have completed your order, order information (order amount, order number and, where applicable, the purchased product) as well as your email address, which has been hashed via a cryptological one-way function, is transmitted to Trusted Shops. The legal basis for this data transfer is Art. 6(1)(f) GDPR. This measure serves to verify whether you are already registered for services with Trusted Shops. It is therefore necessary for the fulfilment of our and Trusted Shops' prevailing legitimate interests in the provision of buyer protection and the transactional review services pursuant to Art. 6(1)(f) GDPR. Should a registration for the services of Trusted Shops already exist, the further processing takes place in accordance with the contractual arrangements concluded between you and Trusted Shops.
On what legal basis do we process your data?
The use of the services of Trusted Shops AG serves to safeguard our legitimate interests in optimal marketing by enabling a secure purchase, which prevail within the framework of a balancing of interests, Art. 6(1)(f) GDPR.
Analysis tools and advertising
We use the following tools in order to analyse the behaviour of our website visitors and to show you advertising.
Google Tag Manager
What is Google Tag Manager?
Tag management system for embedding tracking codes and conversion pixels of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Tag Manager?
https://policies.google.com/privacy
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How do we process your data?
We use Google Tag Manager. The tool helps us to embed tracking codes and conversion pixels into our website, to manage them and to deploy them. Google Tag Manager does not itself create user profiles, does not place cookies on your device and also does not analyse your behaviour as a user. However, it does record your IP address and transmits it to Google servers in the USA.
On what legal basis do we process your data?
We have a legitimate interest in a fast and uncomplicated embedding and management of various tools on our website. The use of Google Tag Manager is therefore lawful pursuant to Art. 6(1)(f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
Google Analytics
What is Google Analytics?
Tool for analysing user behaviour of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Analytics?
https://support.google.com/analytics/answer/6004245?hl=de
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How can you prevent the data collection?
Among other things, with a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de
How do we process your data?
We are always interested in optimising our web offering for the visitors to our website and placing advertising optimally. Google Analytics helps us with this, a tool that analyses the behaviour of users and thus provides us with the necessary data basis for adjustments. Through the tool, we obtain information about the origin of our visitors, their page views and their dwell time on the pages as well as the operating system they use.
Standard processing
In order to collect the data, Google Analytics uses cookies, device fingerprinting or other technologies for the recognition of users. The data is transmitted to Google servers in the USA and combined, with the help of the IP address that is also recorded, into a profile that can be assigned to you or your device.
You can prevent Google from processing your data by installing a browser plug-in that Google itself provides: https://tools.google.com/dlpage/gaoptout?hl=de.
IP anonymisation
Within Google Analytics, we have activated the "IP anonymisation" function. For you, this means that Google shortens your IP address (from the EU or the EEA) before transmission to the USA. Only in exceptional cases does Google transmit the full IP address to servers in the USA and shorten it only there.
E-commerce tracking
We use the "e-commerce tracking" function of Google Analytics. This enables us to analyse the purchasing behaviour of our website visitors and to improve our online marketing campaigns. With e-commerce tracking, your orders, the average order values, the shipping costs and the time from viewing to purchasing a product are recorded, for example. Google can combine the data under a transaction ID and assign it to you or your device.
How long do we store your data?
Data stored at user and event level that is linked to cookies, user identifiers (e.g. user IDs) or advertising IDs is, according to Google's own statement, deleted or anonymised after 14 months (cf. https://support.google.com/analytics/answer/7667196?hl=de).
On what legal basis do we process your data?
As the website operator, we have a legitimate interest in analysing user behaviour for the purpose of optimising our web offering and the advertising placed there. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to the data processing by Google Analytics, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.
Extended data linking through Google Signals
On this website, as an extension of Google Analytics, we use the "Google Signals" function, which enables cross-device tracking.
How do we process your data?
Insofar as you have activated the "Personalised advertising" option in your Google account, Google collects information about your use of our website on various devices. These web and app activities are linked by Google with the information from your Google account in order to provide us with anonymised statistics and reports (e.g. on cross-device conversions or target groups).
How can you prevent and control the data collection?
You have full control over this data at all times. If you do not want Google to link your activities with your account, you can deactivate this in the settings of your Google account. In addition, you can view, manually manage or permanently delete your stored data at any time under the following link: https://myactivity.google.com/
On what legal basis do we process your data?
This data linking takes place exclusively on the basis of your explicit consent within the meaning of Art. 6(1)(a) GDPR, which you have given via our consent management platform (Consent Manager). You can withdraw this consent at any time with effect for the future.
Google Ads
What is Google Ads?
Online advertising programme of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Ads?
https://policies.google.com/privacy?hl=de&gl=de
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How do we process your data?
We use Google Ads. Google's advertising programme enables us to deploy advertisements in the Google search engine or on third-party websites when the visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, on the basis of the user data available at Google (e.g. location data and interests), we can place advertisements in a targeted manner (audience targeting). We evaluate the recorded data quantitatively by analysing, for example, which search terms led to the deployment of our advertisements and how many advertisements led to corresponding clicks.
On what legal basis do we process your data?
As the website operator, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to the data processing by Google, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.
Google Analytics Remarketing
What is Google Analytics Remarketing?
Tool for personalised advertising of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Analytics Remarketing?
https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How can you prevent the data processing?
By objecting to personalised advertising in your Google account or on this page: https://www.google.com/settings/ads/onweb/
How do we process your data?
We are always interested in placing our advertising optimally. The remarketing function of Google Analytics helps us with this.
Standard processing
Remarketing means that we analyse your behaviour on our website in order to assign you to a particular advertising target group and subsequently be able to show you suitable advertising messages when you visit other websites. In addition, we link the advertising target groups with cross-device functions of Google. This enables us to display interest-based, personalised advertising messages that have been adapted on the basis of your usage and surfing behaviour on one device (e.g. your mobile phone) also on another device (e.g. a tablet or PC).
Objecting to personalised advertising
You can adjust the advertising settings in your Google account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated. Outside your Google account, you can object to the personalised advertising under the following link: https://www.google.com/settings/ads/onweb/ (the setting then only applies to the device currently being used and the browser used).
On what legal basis do we process your data?
As the website operator, we have a legitimate interest in the effective marketing of our services and products. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to the data processing by Google Analytics Remarketing, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.
Google Conversion Tracking
What is Google Conversion Tracking?
Tool for analysing user behaviour of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Conversion Tracking?
https://www.google.de/intl/de/policies/privacy/
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How do we process your data?
We are always interested in optimising our web offering for users and placing advertising optimally. For this purpose, we also use Conversion Tracking from Google. With its help, we can record whether and how often visitors to our website have clicked on certain buttons and which products were viewed and purchased particularly frequently (conversion statistics). In the course of the data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification.
On what legal basis do we process your data?
As the website operator, we have a legitimate interest in analysing user behaviour for the purpose of optimising our web offering and the advertising placed there. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to the data processing by Google Conversion Tracking, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.
Google Ads Remarketing
What is Google Ads Remarketing?
Online advertising programme of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Ads Remarketing?
https://policies.google.com/privacy?hl=de&gl=de
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How do we process your data?
We use Google Ads Remarketing. Remarketing is a function of online marketing in which advertising is deployed to users who have already interacted with a website or an online shop. Google Remarketing uses data from the Google advertising platform and Google Ads tracking in order to target advertising campaigns specifically at those users who have already shown interest in a particular product or service. Google's advertising programme enables us to deploy advertisements in the Google search engine or on third-party websites when the visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, on the basis of the user data available at Google (e.g. location data and interests), we can place advertisements in a targeted manner (audience targeting). We evaluate the recorded data quantitatively by analysing, for example, which search terms led to the deployment of our advertisements and how many advertisements led to corresponding clicks.
You can adjust the advertising settings in your Google account. To do so, click on the following link and log in: https://www.google.com/settings/ads/onweb/
On what legal basis do we process your data?
As the website operator, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to the data processing by Google, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.
Plugins and tools
YouTube (with extended data protection)
What is YouTube?
Video platform
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at YouTube?
How do we process your data?
On our website, you can watch YouTube videos. In doing so, Google, as the provider of YouTube, collects and stores certain information about you. Since we use YouTube in the extended data protection mode, however, this only happens when you start a video. Specifically, the following happens in this case:
- Google's servers are informed which of our pages have been visited from your device. If you are logged into your YouTube account while surfing, Google can assign your surfing behaviour directly to your personal profile. If you do not want this, you must log out of your YouTube account before you continue surfing the internet.
- Google receives information about the visitors to our website via cookies, device fingerprinting or similar recognition technologies. On this basis, the company then creates video statistics, makes its application more attractive for users and prevents fraud attempts.
- Where applicable, there may also be further processing of your data beyond this. However, details are beyond our knowledge. Nor can we influence the processing.
Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and, where applicable, also to further partners. The extended data protection mode therefore does not mean that Google does not process any data about you at all when you visit our website.
On what legal basis do we process your data?
By embedding YouTube videos, we wish to make our website as well as our services and offerings more appealing. This is our legitimate interest as a company and thus lawful pursuant to Art. 6(1)(f) GDPR.
If you have consented to the data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.
Google reCAPTCHA
What is Google reCAPTCHA?
Test tool for distinguishing between humans and computers of Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google?
https://policies.google.com/privacy?hl=de
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
How do we process your data?
With Google reCAPTCHA, we check whether data entered into forms on our website originates from a human or from a computer. For you, this means that the test tool analyses your behaviour as a visitor to our website on the basis of various characteristics. The analysis does not begin only when you use the test tool, but already when you access our website. Various data is recorded, e.g. the IP address, the dwell time on our website and mouse movements made. The data is forwarded to Google.
On what legal basis do we process your data?
As a company, we have a legitimate interest in protecting our web offerings against spam and abusive spying. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.
If you have consented to the data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.
E-commerce and payment providers
Customer and contract data
How do we process your data?
When we conclude a contract with you, we need certain personal data from you. We collect, process and use this data only insofar as it is necessary in order to establish our legal relationship, to structure it in terms of content or to amend it. If you can only make use of our services via our website, or if the services are billed via the website, we also record usage data, insofar as this is necessary to enable you to make use of our offering or to bill the service used.
How long do we store your data?
We store your data until our legal relationship ends, unless we are legally obliged to retain the data for longer.
On what legal basis do we process your data?
We store your data in order to perform the contract with you or to carry out pre-contractual measures. The basis for the data processing is thus Art. 6(1)(b) GDPR.
Data transfer in the case of shipment of goods
How do we process your data?
When you order goods from us, we transfer your data to companies that we commission with the delivery and/or via which we process the payment. In doing so, only data is transferred that is necessary for the commissioned company to carry out the specific order. If we wish to pass on data beyond this, we will obtain your consent. We do not pass on your data for advertising purposes.
On what legal basis do we process your data?
We pass on your data in order to perform the contract we have concluded with you. The basis for the data processing is thus Art. 6(1)(b) GDPR.
Payment services
So that you can conveniently pay for your purchases on our website, we use the service of payment service providers, i.e. external companies that process the payments for us. Which these are specifically can be seen from the list at the end of this section.
How do we process your data?
For the payment process, you must provide certain personal data, e.g. your name, your bank details or credit card number. We pass this data on to the respective payment service. For the transaction itself, the respective contractual and data protection provisions of the respective services apply.
On what legal basis do we process your data?
We pass on your data in order to perform the contract we have concluded with you. The basis for the data processing is thus Art. 6(1)(b) GDPR. In addition, we have a legitimate interest in processing purchases as quickly, conveniently and securely as possible. In this respect, the legal basis is also Art. 6(1)(f) GDPR. If you have consented to the passing on of your data, the data processing is based on Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
Which payment services do we use?
PayPal
What is PayPal?
Online payment service
Who processes your data?
PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg
Where can you find further information about data protection at PayPal?
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
On what basis do we transfer your data to the USA?
PayPal adheres to the standard contractual clauses of the European Commission (cf. https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full)
Mollie
What is Mollie?
Online payment service
Who processes your data?
Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands
Where can you find further information about data protection at Mollie?
Apple Pay
What is Apple Pay?
Mobile payment service of Apple Inc.
Who processes your data?
Apple Inc., Infinite Loop, Cupertino, CA 95014, USA
Where can you find further information about data protection at Apple Pay?
https://www.apple.com/legal/privacy/de-ww/
On what basis do we transfer your data to the USA?
Apple Pay adheres to the standard contractual clauses of the European Commission (cf. https://www.apple.com/legal/privacy/de-ww/)
Google Pay
What is Google Pay?
Mobile payment system of the US company Google
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information about data protection at Google Pay?
https://policies.google.com/privacy
On what basis do we transfer your data to the USA?
On the basis of the adequacy decision of the European Commission as well as the corresponding certification of the company.
Klarna
What is Klarna?
Payment service
Who processes your data?
Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden
Where can you find further information about data protection at Klarna?
Sofortüberweisung
What is Sofortüberweisung?
Online payment method that works like a bank transfer, but in which a third company is interposed that confirms the payment to us as the seller
Who processes your data?
Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (Sofort GmbH belongs to the Klarna Group)
Where can you find further information about data protection at Sofortüberweisung?
https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/
Shopware
What is Shopware?
Shop system with which an own online shop can be created
Who processes your data?
shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany
Where can you find further information about data protection at Shopware?
https://www.shopware.com/de/datenschutz/
How do we process your data?
We offer certain goods or services and use the Shopware service for this purpose. Shopware uses technically necessary cookies in order to enable system-related functions. No personal data is stored or processed.