Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are under no obligation to provide your data. Failure to provide such data will have no consequences. This only applies where no other information is provided in connection with the processing activities described below.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted to us or to our web hosting provider / IT service provider by your internet browser and stored in log data (known as server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the European Union, particularly Canada and the United States. An adequacy decision of the European Commission exists for Canada. For the United States, an adequacy decision exists under the EU-U.S. Data Privacy Framework (DPF). Shopify is not certified under the Data Privacy Framework. This transfer of data is based on contractual obligations comparable to the European Commission's Standard Contractual Clauses.

Contact

Data Controller

You may contact us at any time. The data controller responsible for data processing is:

Pascuali GmbH
Donatusstr. 102, M09
50259 Pulheim-Brauweiler
Germany

Telephone: +49 2234 5328828
Email: customer-service@pascuali.de

Customer-Initiated Contact by Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, and message content) only to the extent you provide it.

The data is processed for the purpose of handling and responding to your enquiry.

Where your enquiry relates to pre-contractual measures (e.g. advice regarding a purchase, preparation of a quotation) or concerns a contract already concluded between you and us, the data is processed on the basis of Article 6(1)(b) GDPR.

If your enquiry is made for other reasons, the processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

Your email address will only be used to process your enquiry. Your data will subsequently be deleted in accordance with the applicable statutory retention periods unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use our contact form, we collect your personal data (name, email address, and message content) only to the extent you provide it. The data is processed for the purpose of contacting you.

Use of Google Maps API Address Validation

We use the Google Address Validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, "Google") on our website.

The data is processed for the purpose of validating your address entries in our address forms in real time, checking for input and spelling errors, and, where necessary, supplementing missing information. If incorrect information is entered, alternative suggestions for correcting the address will be displayed. For this purpose, the address data you enter is transmitted to Google, where it is stored and analysed.

The following information may be transmitted to and processed by Google, among other things: postal addresses (country, city, postcode, street, house number), email address, and telephone number.

Your data may also be transferred to the United States. An adequacy decision of the European Commission exists for the United States under the EU-U.S. Data Privacy Framework (DPF). Google is certified under the Data Privacy Framework and has therefore committed to complying with European data protection principles.

The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in maintaining accurate data for the fulfilment of our contractual obligations. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

The data is processed separately by Google and is not combined with other data. It will be deleted by Google as soon as the status of the entered data has been determined, and no later than 30 days thereafter.

Further information on Google's terms of use and privacy policy can be found at:
https://cloud.google.com/maps-platform/terms
and
https://www.google.com/policies/privacy/

Customer Account Orders

Customer Account

When you create a customer account, we collect your personal data to the extent specified during the registration process. The data is processed for the purpose of improving your shopping experience and simplifying the order process. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When you place an order, we collect and process your personal data only to the extent necessary for the fulfilment and processing of your order and for handling your enquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. Processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with the applicable legal requirements. The scope of the data transferred is limited to the minimum necessary.

Reviews Advertising

Collection of Data When Submitting a Comment or Review

When you submit a comment or review of an item or post, we collect your personal data (name, email address, and comment text) only to the extent that you provide it. The processing serves the purpose of enabling comments and reviews and displaying them.

To verify your review or comment, we also collect the following data:

Order number.

By submitting your comment or review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of any processing carried out on the basis of your consent before its withdrawal. Your personal data will then be deleted.

When your comment or review is published, the name you provided and the email address you supplied will be published.

Use of Your Personal Data for Postal Advertising

We use your personal data (name and postal address), which we have received in connection with the sale of goods or services, to send you advertising by post, provided you have not objected to this use.

Providing this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.

Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in direct marketing. You may object to the use of your address data at any time by notifying us. The contact details for exercising your right to object can be found in the Legal Notice.

Use of Your Email Address for Newsletters

We use your email address to send you newsletters containing information and offers, provided you have expressly consented to this. The processing serves exclusively the purpose of sending promotional communications. For this purpose, we process your email address and, where applicable, any additional information you voluntarily provided when subscribing to the newsletter.

The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

You may unsubscribe from the newsletter at any time by using the unsubscribe link included in every newsletter or by notifying us directly. Your email address will then be removed from our mailing list.

Despite its removal from the mailing list, we may continue to store your email address on a blacklist in order to prevent future newsletter mailings. This storage is based on Article 6(1)(f) GDPR due to our and your legitimate interest in preventing further use of your email address for newsletter distribution. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Use of Your Email Address for Direct Marketing

We use the email address obtained in connection with the sale of goods or services to send you electronic advertising for our own products or services that are similar to those you have already purchased from us, unless you have objected to such use.

Providing your email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.

The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in direct marketing. You may object to the use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the Legal Notice. You may also use the unsubscribe link provided in every marketing email. No costs other than the basic transmission costs will be incurred.

Use of Brevo (formerly Sendinblue)

We use the newsletter service provided by Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin, Germany; "Brevo") under a data processing agreement.

We transmit the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to Brevo. The processing serves the purpose of distributing newsletters and carrying out statistical analyses.

To analyse newsletter campaigns, the newsletters we send contain a 1×1 pixel image (tracking pixel) and/or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any embedded links.

In this context, personal data such as your IP address, browser type, device information, and the time the newsletter was opened may also be collected. Usage profiles may be created under a pseudonym based on this data. The data collected is not used to identify you personally. It is used exclusively for statistical evaluation to improve our newsletter campaigns.

The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in maintaining an effective, targeted, and user-friendly newsletter system. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Further information and Brevo's Privacy Policy are available at:
https://www.brevo.com/legal/privacypolicy/

Shipping Service Providers Merchandise Management System

Disclosure of Your Email Address to Shipping Companies for Shipment Tracking

We will provide your email address to the shipping company as part of the contractual processing, provided that you have expressly consented to this during the ordering process. The purpose of the disclosure is to enable the shipping company to inform you by email about the status of your shipment.

The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying either us or the shipping company, without affecting the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

Use of an External Merchandise Management System

We use an external merchandise management system to process contracts under a data processing agreement. For this purpose, the personal data collected as part of your order will be transmitted to:

plentysystems AG
Johanna-Waescher-Straße 7
34131 Kassel
Germany

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6(1)(b) GDPR.

Payment Service Providers

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website.

The processing of data serves the purpose of enabling you to make payments using PayPal Express.

To integrate this payment service, it is necessary for PayPal to collect, store, and analyse data when you access the website (e.g. IP address, device type, operating system, browser type, and your device's location). Cookies may also be used for this purpose. These cookies enable your browser to be recognised.

The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

When you select and use PayPal Express, the data required to process the payment is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Further information on data processing when using PayPal Express can be found in PayPal's Privacy Policy at:
www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Checkout

We use the PayPal Checkout payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website.

The processing of data serves the purpose of enabling you to make payments using this payment service.

When you select payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Cookies may be stored for this purpose to enable your browser to be recognised. The resulting data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit assessment using mathematical and statistical methods through credit agencies.

For this purpose, PayPal transmits the personal data required for the credit assessment to a credit agency and uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, performance, or termination of the contractual relationship.

The credit assessment may include probability values (credit scores) calculated using scientifically recognised mathematical and statistical methods, which may include address data in their calculation. Your legitimate interests are taken into account in accordance with the applicable legal provisions.

The processing serves the purpose of assessing creditworthiness prior to entering into a contract and is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in protecting ourselves against payment defaults where PayPal provides services in advance.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f) GDPR by notifying PayPal.

Providing this data is necessary for the conclusion of the contract using your chosen payment method. Failure to provide the data will result in the contract not being concluded using the selected payment method.

Third-Party Payment Providers

If you choose to pay using a third-party payment method, the data required for payment processing will first be transmitted to PayPal. To process the selected payment method, PayPal may subsequently transfer this data to the respective provider. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Local third-party providers may include, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on Invoice via PayPal

If you select payment by invoice, the data required for payment processing is first transmitted to PayPal. To process this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin, Germany; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Ratepay may carry out a credit assessment using mathematical and statistical methods through credit agencies, as described above. The processing serves the purpose of assessing creditworthiness prior to entering into a contract and is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in protecting ourselves against payment defaults where Ratepay provides services in advance.

Further information regarding data protection and the credit agencies used by Ratepay can be found at:

https://www.ratepay.com/legal-payment-dataprivacy/

https://www.ratepay.com/legal-payment-creditagencies/

Further information on PayPal's processing of personal data can be found in PayPal's Privacy Policy at:

https://www.paypal.com/privacy

Use of Amazon Payments

We use the Amazon Payments payment service provided by Amazon Payments Europe s.c.a. (38 Avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website.

The processing of data serves the purpose of enabling you to make payments using the Amazon Payments service.

To integrate this payment service, Amazon Payments must collect, store, and analyse data when you access the website (e.g. IP address, device type, operating system, browser type, and your device's location). Cookies may also be used for this purpose. These cookies enable your browser to be recognised.

When you select and use Amazon Payments, the data required to process the payment is transmitted to Amazon Payments in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Further information on data processing by Amazon Payments can be found in the corresponding Privacy Policy at:

https://pay.amazon.com/privacy

Use of Klarna Payment Options

We use the payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna") on our website.

When you select payment via Klarna, the data required to process the payment is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.

Cookies may be stored during this process to enable your browser to be recognised. The resulting data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

"Pay Later" (Invoice), "Pay Now" (Direct Debit, Credit Card, Instant Bank Transfer), "Financing" (Installment Payments)

For certain payment methods, such as "Pay Later" (invoice), "Pay Now" (direct debit, credit card, instant bank transfer), and "Financing" (installment payments), Klarna reserves the right to obtain a credit assessment using mathematical and statistical methods through credit agencies.

For this purpose, Klarna transmits the personal data required for the credit assessment, such as your first and last name, address, gender, email address, IP address, and order-related information, to a credit agency for identity and creditworthiness verification. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, performance, or termination of the contractual relationship.

The credit assessment may include probability values (credit scores) calculated using scientifically recognised mathematical and statistical methods, which may also include address data in their calculation. Your legitimate interests are taken into account in accordance with the applicable legal provisions.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Article 6(1)(f) GDPR by notifying Klarna.

Further information, including details of the credit agencies to which Klarna discloses your personal data, can be found at:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/credit_rating_agencies

General information about Klarna is available at:

https://www.klarna.com/

Your personal data will be processed by Klarna in accordance with the applicable data protection legislation and as described in Klarna's Privacy Policy:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored by your internet browser on your computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique identifier that allows the browser to be recognised when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are stored, decide individually whether to accept them, and prevent both the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that doing so may prevent you from making full use of all the functions of this website.

The following links explain how to manage (including disable) cookies in the most commonly used browsers:

Chrome:
https://support.google.com/accounts/answer/61416

Microsoft Edge:
https://support.microsoft.com/microsoft-edge

Mozilla Firefox:
https://support.mozilla.org/kb/enable-and-disable-cookies

Safari:
https://support.apple.com/guide/safari/manage-cookies-and-website-data

Technically Necessary Cookies

Unless otherwise stated in this Privacy Policy, we use only those technically necessary cookies that are required to make our website more user-friendly, effective, and secure. Cookies also enable our systems to recognise your browser after you move from one page to another and to provide you with services. Certain functions of our website cannot be provided without the use of cookies, as these require the browser to be recognised even after changing pages.

The use of cookies or similar technologies is based on Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of our website and providing a user-friendly and efficient online experience.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Use of GDPR Legal Cookie

We use the consent management tool GDPR Legal Cookie provided by iubenda s.r.l., Via San Raffaele 1, 20121 Milan, Italy ("iubenda") on our website.

The tool enables you to grant consent to data processing via the website, in particular the use of cookies, and to exercise your right to withdraw any consent already given.

The purpose of the processing is to obtain and document the legally required consents for data processing and thereby comply with our legal obligations. Cookies may be used for this purpose.

Among other things, the following information may be collected and transmitted to iubenda: anonymised IP address, date and time of consent, URL from which the consent was submitted, anonymous, randomly generated encrypted key, and consent status. This data will not be disclosed to any other third parties.

The processing is carried out for compliance with a legal obligation on the basis of Article 6(1)(c) GDPR.

Further information regarding iubenda's Terms of Use and Privacy Policy is available at:

https://www.iubenda.com/

https://gdpr-legal-cookie.com/

Analytics Advertising Tracking Communication

Use of Google Analytics 4

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The processing of data serves the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.

Among other things, the following information may be collected: IP address, date and time of page access, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activities. Your data may be linked by Google with other information, such as your search history, your personal accounts, your usage data from other devices, and any other information Google holds about you.

Your IP address will first be truncated by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area.

The processing of your personal data is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.

We also use the Google Signals service in this context. Google Signals enables cross-device tracking. Your data may therefore be analysed across multiple devices if you have activated "personalised advertising" in your Google account settings and your devices are linked to your Google account. This makes it possible to determine, for example, on which device you searched for products and whether you later returned on another device, such as a tablet, to complete a purchase.

The cross-device reports generated in this context contain only aggregated data. We therefore receive only statistical information generated by Google Signals. To prevent Google Signals from collecting and storing your data across devices, you can disable the "Personalised Ads" feature in your Google Account settings. Further information is available at:

https://support.google.com/ads/answer/2662922

Further information about data processing and privacy in relation to Google Signals is available at:

https://support.google.com/analytics/answer/7532985

The information generated about your use of this website is generally transmitted to and stored on a Google server in the United States. An adequacy decision of the European Commission exists for the United States under the EU-U.S. Data Privacy Framework (DPF). Google is certified under the Data Privacy Framework and has therefore committed to complying with European data protection principles. Both Google and U.S. government authorities may have access to your data.

Further information on Google's Terms of Use and Privacy Policy is available at:

https://policies.google.com/technologies/partner-sites

and

https://policies.google.com/privacy

Use of Shopify Analytics

We use the analytics and statistics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") under a data processing agreement. Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The processing of data serves the purpose of analysing this website and its visitors. Data is stored and processed for marketing and optimisation purposes and is used to generate reports, analyses, and statistics.

Among other things, the following device information may be collected and processed: information about your web browser, IP address, time zone, and certain cookies installed on your device. While you browse the website, information about the pages or products viewed, the referrer URL (the website from which you accessed our website), and your interactions with the website is also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to record information about how you browse the website) are used for this purpose.

Your data may be transferred to and processed in third countries outside the European Union, particularly Canada and the United States. An adequacy decision of the European Commission exists for Canada. For the United States, an adequacy decision exists under the EU-U.S. Data Privacy Framework (DPF). Shopify is not certified under the Data Privacy Framework. Such data transfers are based on contractual obligations comparable to the European Commission's Standard Contractual Clauses.

The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is likewise based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.

Further information on Shopify's Privacy Policy is available at:

https://www.shopify.com/legal/privacy

Information on Shopify's Data Processing Agreement is available at:

https://www.shopify.com/legal/dpa

Information about the cookies used by Shopify is available at:

https://www.shopify.com/legal/cookies

Use of the Meta Pixel

We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we act as joint controllers with regard to the collection of your data and its transmission to Meta when this service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities of each party. The agreement is available at:

https://www.facebook.com/legal/terms/businesstools

Under this agreement, we are primarily responsible for fulfilling the information obligations under Articles 13 and 14 GDPR, complying with the security requirements of Article 32 GDPR concerning the proper technical implementation and configuration of the service, and fulfilling the obligations under Articles 33 and 34 GDPR where a personal data breach concerns our obligations under the joint processing agreement.

Meta is responsible for enabling data subject rights under Articles 15–20 GDPR, complying with the security requirements of Article 32 GDPR relating to the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR where a personal data breach concerns Meta's obligations under the joint processing agreement.

The purpose of the application is to display interest-based advertising to visitors of our website on the Facebook and Instagram social networks. For this purpose, the Meta remarketing tag has been integrated into our website. When you visit our website, this tag establishes a direct connection to Meta's servers, informing Meta which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. If you subsequently visit Facebook or Instagram, you may be shown personalised, interest-based advertisements.

The application also serves to compile conversion statistics. We receive information about the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag, as well as the actions performed after being redirected to our website. However, we do not receive any information that personally identifies individual users.

Your data may be transferred to the United States. An adequacy decision of the European Commission exists for the United States under the EU-U.S. Data Privacy Framework (DPF). Meta is certified under the Data Privacy Framework and has therefore committed to complying with European data protection principles.

The processing of your personal data is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.

You can disable the "Custom Audiences" remarketing feature here. Further information regarding the collection and use of data by Meta, your rights, and options for protecting your privacy can be found in Meta's Privacy Policy at:

https://www.facebook.com/privacy/

Plug-ins and Other Services

Use of Google reCAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The purpose of this service is to distinguish whether data entered on our website (e.g. in a contact form) is provided by a human or by an automated program. For this purpose, Google collects and analyses information such as your IP address, referrer URL, operating system information, mouse movements, keyboard interactions, time spent on the website, and, where applicable, other data required by Google for reCAPTCHA.

The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in protecting our website against automated abuse and spam. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Your data may be transmitted to Google servers in the United States and processed there. An adequacy decision of the European Commission exists for the United States under the EU-U.S. Data Privacy Framework (DPF). Google is certified under the Data Privacy Framework and has therefore committed to complying with European data protection principles.

Further information about Google reCAPTCHA and Google's Privacy Policy can be found at:

https://www.google.com/recaptcha/about/

https://policies.google.com/privacy

Use of Google Fonts

We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The purpose of data processing is the uniform display of fonts on our website. To load the fonts, a connection to Google's servers is established when the page is accessed. During this process, cookies may be used. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the United States. An adequacy decision of the European Commission exists for the United States under the EU-U.S. Data Privacy Framework (DPF). Google is certified under the Data Privacy Framework and has therefore committed to complying with European data protection principles.

Further information on data processing and privacy can be found at:

https://www.google.de/intl/en/policies/

and

https://developers.google.com/fonts/faq

Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application is used to manage JavaScript tags and HTML tags that are implemented for tracking and analytics tools in particular. The data processing serves the purpose of designing and optimising our website according to user needs.

Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the activation of additional tags that may collect and process personal data.

Further information regarding the Terms of Use and Privacy Policy is available at:

https://www.google.com/intl/en/tagmanager/use-policy.html

Use of YouTube

Our website embeds videos from YouTube, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), using the enhanced privacy mode.

The purpose of the processing is to display videos and make our website more attractive. When you visit a page containing an embedded YouTube video, a connection to YouTube's servers is established. This informs YouTube which of our pages you have visited. If you are logged into your YouTube account, YouTube can associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

When you start a YouTube video, YouTube may use cookies or similar technologies to collect information about user behaviour, create video statistics, improve user-friendliness, and prevent abusive practices.

Further information on the collection and use of data by YouTube and Google, your rights, and available privacy settings can be found in Google's Privacy Policy at:

https://policies.google.com/privacy

Rights of Data Subjects and Storage Period

Duration of Storage

After the contract has been fully processed, your data will initially be stored for the duration of the statutory warranty period and thereafter in accordance with statutory retention periods under tax and commercial law. Once these periods have expired, your data will be deleted unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability

Furthermore, pursuant to Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with the Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may lodge a complaint with the supervisory authority responsible for us at:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

Right to Object

Where the processing of personal data described in this Privacy Policy is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with effect for the future.

Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims.

Where personal data is processed for the purposes of direct marketing, you may object to such processing at any time by notifying us. Once you object, we will cease processing the data concerned for direct marketing purposes.

Last updated: 29 November 2024