Last Updated: November 29, 2023 Version: 1.2

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally or contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies unless otherwise specified in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.


Server Log Files

You can visit our websites without providing any personal information. With each access to our website, usage data is transmitted by your internet browser to us or our web hoster / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of access, the IP address, the transferred data volume, and the requesting provider.

The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offerings.


Contact

Controller

Please contact us if you wish. The controller for data processing is: Jan Smyrek, Gerichtsstr. 15, 58540 Meinerzhagen Germany, +49 2354 9079690, info@pawhost.de

Data Processing when using the Reporting System according to TCO Regulation (Regulation (EU) 2021/784) and Digital Services Act (Regulation (EU) 2022/2065)

If you transmit information to us regarding alleged terrorist content or other illegal content via email, contact form, or other electronic communication means provided by us, we collect your personal data (email address, name, message text) only to the extent provided by you. The data processing serves the purpose of carrying out a reporting procedure compliant with the mentioned regulations.

The data processing takes place for the fulfillment of a legal obligation based on Art. 6 (1) lit. c GDPR in conjunction with Art. 15 TCO-VO and Art. 6 (1) lit. c GDPR in conjunction with Art. 11, 12 and 16 of the Digital Services Act. Your data will then be deleted in compliance with legal retention periods.

Initiated Contact by the Customer via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of processing and responding to your contact request.

If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) lit. b GDPR.

If the contact is made for other reasons, this data processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to this processing of personal data concerning you, based on Art. 6 (1) lit. f GDPR, at any time for reasons arising from your particular situation.

We only use your email address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.

Collection and Processing when using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.

If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) lit. b GDPR.

If the contact is made for other reasons, this data processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to this processing of personal data concerning you, based on Art. 6 (1) lit. f GDPR, at any time for reasons arising from your particular situation.

We only use your email address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.

Collection and Processing for Applications via Email

Website visitors interested in vacant positions advertised on our website can apply by email. In this process, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, telephone number), information on your professional qualifications and education, information on professional training, and performance-related evidence.

The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of data is necessary to carry out the application process. The processing of your personal data is based on Art. 6 (1) lit. b GDPR in conjunction with § 26 (1) BDSG for the implementation of pre-contractual measures (carrying out the application process as a preliminary to an employment contract).

If you have given us consent to process personal data for inclusion in our applicant pool, e.g., by checking a checkbox, the processing is based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

If, as part of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and social security law and social protection law and fulfill our corresponding obligations.

We store your personal data as long as it is necessary for the decision on your application. Your data will then be deleted no later than six months, unless you have consented to further processing and use. If an employment relationship arises after the application process, the provided data will be further processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with § 26 (1) BDSG for the purposes of carrying out the employment relationship and subsequently transferred to the personnel file.

Collection and Processing when using the Application Form

When using the application form, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, telephone number), information on your professional qualifications and education, information on professional training, and performance-related evidence.

The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of data is necessary to carry out the application process. The processing of your personal data is based on Art. 6 (1) lit. b DSGVO in conjunction with § 26 (1) BDSG for the implementation of pre-contractual measures (carrying out the application process as a preliminary to an employment contract).

If you have given us consent to process personal data for inclusion in our applicant pool, e.g., by checking a checkbox, the processing is based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

If, as part of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and social security law and social protection law and fulfill our corresponding obligations.

We store your personal data as long as it is necessary for the decision on your application. Your data will then be deleted no later than six months, unless you have consented to further processing and use. If an employment relationship arises after the application process, the provided data will be further processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with § 26 (1) BDSG for the purposes of carrying out the employment relationship and subsequently transferred to the personnel file.


Customer Account and Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of data is necessary for the conclusion of a contract. Non-provision means that no contract can be concluded. The processing is based on Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.

Your data may be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transmission is limited to a minimum.


Advertising

Use of your personal data for sending postal advertising

We use your personal data (name, address) that we have received in the context of the sale of goods or services to send you postal advertising, unless you have objected to this use. The provision of this data is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded.

The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Use of the email address for sending newsletters

We use your email address exclusively for our own advertising purposes for sending newsletters, regardless of contract processing, provided that you have expressly agreed to this. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of the email address for sending direct advertising

We use your email address, which we have received in the context of the sale of goods or services, for the electronic sending of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded. The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the link provided in the promotional email for this purpose. There are no costs other than the transmission costs according to the basic rates.


Inventory Management

Use of an external inventory management system

We use an inventory management system within the scope of order processing for contract fulfillment. For this purpose, your personal data collected during the order process is transmitted to

WHMCS Limited, Woodside House, Giffard Park, Milton Keynes, MK14 5QF, UK

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 (1) lit. b GDPR.


Payment Service Providers

Use of PayPal Check-Out

We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR.

Cookies may be stored here, which enable your browser to be recognized. The data processing that takes place as a result is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate concerns will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal provides services in advance.

You have the right to object to this processing of personal data concerning you, based on Art. 6 (1) lit. f GDPR, at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you desire. Non-provision means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 (1) lit. b GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 (1) lit. b GDPR. Local third-party providers can be, for example:

  • Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on account via PayPal

When paying via the invoice purchase payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit assessment based on mathematical-statistical procedures (probability or score values) using credit agencies, as described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay provides services in advance. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of the payment service provider Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing serves the purpose of being able to offer you various payment methods through payment processing via the payment service provider Mollie. If you have chosen one of the payment options of the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment data (e.g., bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, your address data, and information about the product or service you have purchased from us. This data processing is based on Art. 6 (1) lit. b GDPR. Further information on data processing when using the payment service provider Mollie can be found in the associated privacy policy https://www.mollie.com/de/privacy.


Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, we point out that you may then not be able to fully use all functions of this website.

Under the links below you can find out how to manage (including deactivating) cookies in the most important browsers:

Technically Necessary Cookies

Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

We use the consent management tool GDPR Legal Cookie from beeclever GmbH (Universitätsstraße 3, 56070 Koblenz a. Rh.; "beeclever") on our website. The tool allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given.

The data processing serves the purpose of obtaining and documenting necessary consents for data processing and thus complying with legal obligations. Cookies may be used for this purpose. The following information, among others, can be collected and transmitted to beeclever: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to other third parties.

The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c GDPR. Further information on terms of use and data protection at beeclever can be found at: https://gdpr-legal-cookie.com/pages/terms-conditions and at https://gdpr-legal-cookie.com/pages/datenschutzerklarung.


Communication

Use of the Live Chat System tawk.to

We use the live chat system from tawk.to inc. (187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA, "tawk.to") on our website.

The data processing serves the purpose of communication between you and us as the provider. Anonymous data is processed for the operation of the system and for web analysis purposes. User profiles can be created from this data under a pseudonym, whereby cookies may be used. The cookies enable the recognition of the internet browser.

The collected data is not used to personally identify the visitor to this website without the separate consent of the data subject.

Your data may be transmitted to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). tawk.to has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.


Plug-ins and Others

Use of Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools, among others. The data processing serves the purpose of needs-based design and optimization of our website.

Google Tag Manager itself does not store cookies or process personal data. However, it enables the triggering of other tags that can collect and process personal data.

Further information on terms of use and data protection can be found here.

Use of Social Plug-ins

We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place in this context serves the purpose of optimizing advertising for our products.

When social plug-ins are integrated, a connection is established between your computer and the servers of the social network providers, and the plug-in is displayed on the page by notification to your browser, provided you have expressly consented to this. In this process, both your IP address and the information about which of our pages you have visited are transmitted to the provider servers. This applies regardless of whether you are registered or logged in to the social network. Transmission also occurs for users who are not registered or logged in. If you are simultaneously connected to one or more of your social network accounts, the collected information can also be assigned to your corresponding profiles. When using the plug-in functions (e.g., by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The social networks listed below are integrated into our website via social plug-ins. Further information on the scope and purpose of the collection and use of data as well as your rights and options for protecting your privacy can be found in the linked privacy notices of the providers.

  • Instagram from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): https://help.instagram.com/155833707900388 Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to comply with European data protection principles.
  • X, formerly known as Twitter, (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) https://twitter.com/privacyhttps://twitter.com/personalization Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). X has certified under the TADPF and thus committed to comply with European data protection principles.

Use of Social Plug-ins via "Shariff"

We use social network plug-ins on our website. To help you control your data, we use the data-protection-friendly "Shariff" buttons.

Without your express consent, no connections to the servers of social networks are established and, consequently, no data is transmitted.

"Shariff" is a development by the specialists of the computer magazine c't. It enables more privacy on the web and replaces the usual "Share" buttons of social networks. More information about the Shariff project can be found here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

When you click the buttons, a pop-up window appears in which you can log in with your data to the respective provider. Only after this active login by you will a direct connection to the social networks be established.

By logging in, you give your consent to the transfer of your data to the respective social media provider. This includes, among other things, the transmission of your IP address and the information about which of our pages you have visited. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks listed below are integrated using the "Shariff" function.

Further information on the scope and purpose of the collection and use of data, as well as your rights and options for protecting your privacy, can be found in the linked privacy notices of the providers.

  • Instagram from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388. Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to comply with European data protection principles.
  • X, formerly known as Twitter, (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) https://twitter.com/privacyhttps://twitter.com/personalization Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). X has certified under the TADPF and thus committed to comply with European data protection principles.

Use of Social Plug-ins via the "2-Click Solution"

We use social network plug-ins on our website via the "2-Click Solution." This means that without your explicit consent, no connections to the servers of social networks are established, and consequently, no data is transmitted.

With the standard integration of plug-ins, when you access pages of our website that contain such a plug-in, a connection is established between your computer and the servers of the social network providers, and the plug-in is then displayed on the page by notification to your browser. In this process, both your IP address and the information about which of our pages you have visited are transmitted to the provider servers. This applies regardless of whether you are registered or logged in to the social network. Transmission also occurs for users who are not registered or logged in. If you are also logged into the social network Facebook, this information is assigned to your personal user account. When using the plug-in functions (e.g., by pressing the button), this information is also assigned to your user account, which you can only prevent by logging out before using the plug-in. To help you control your data, we have decided to deactivate the corresponding button initially. You can recognize this by the grayed-out button. Without your express consent – in the form of activating the button – no connection to the social network server is established, and consequently, no data is transmitted.

Only when you activate the button does it become active (highlighted in color) and a direct connection to the social network's servers is established.

By activating it, you give your consent to the transfer of your data to the respective social network provider. This includes, among other things, the transmission of your IP address and the information about which of our pages you have visited. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your user accounts on the social networks before visiting our website and before activating the buttons.

The social networks listed below are integrated using the "2-Click function." Further information on the scope and purpose of the collection and use of data, as well as your rights and options for protecting your privacy, can be found in the linked privacy notices of the providers.

  • Instagram from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): http://instagram.com/legal/privacy/ Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and thus committed to comply with European data protection principles.
  • X, formerly known as Twitter, (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA) https://twitter.com/privacyhttps://twitter.com/personalization Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). X has certified under the TADPF and thus committed to comply with European data protection principles.

Use of Google reCAPTCHA

We use the reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The query serves the purpose of distinguishing between input made by a human and input made by automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google invisible reCAPTCHA

We use the invisible reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This serves the purpose of distinguishing between input made by a human and input made by automated, machine processing. In the background, Google collects and analyzes usage data that invisible reCAPTCHA uses to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and possibly other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.

This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Cloudflare

We use the Content Delivery Network Cloudflare CDN from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a supra-regional network of servers in various data centers with which our web server connects and through which certain content of our website is delivered.

The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.

The following information, among others, can be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).

Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified under the TADPF and thus committed to comply with European data protection principles.

The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of personal data concerning you, based on Art. 6 (1) lit. f GDPR, at any time for reasons arising from your particular situation.

Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.

Use of YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The function displays videos stored on YouTube in an iFrame on the website. The "extended data protection mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of uniform presentation of fonts on our website. To load the fonts, a connection to Google's servers is established when the page is called up. Cookies may be used here. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transmitted to the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Use of FontAwesome

We use Font Awesome from Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA "Font Awesome") on our website. The data processing serves the purpose of uniform presentation of fonts and icons on our website. To load the fonts, a connection to FontAwesome's servers is established when the page is called up.

Cookies may be used here. Among other things, your IP address and information about the browser you use are processed and transmitted to Font Awesome. Your data may be transmitted to third countries, such as the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Font Awesome is not certified under the TADPF.

The use of cookies or comparable technologies takes place with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data processing and data protection can be found at https://fontawesome.com/privacy and at https://fontawesome.com/support.


Data Subject Rights and Storage Period

Duration of Storage

After complete contract processing, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR:

  • Right to information
  • to rectification
  • to erasure
  • to restriction of processing
  • to data portability

In addition, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct marketing, in accordance with Art. 21 (1) GDPR.

Right to Lodge a Complaint with the Supervisory Authority

According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44 40102 Düsseldorf Tel.: +49 211 384240 Fax: +49 211 38424999 E-Mail: poststelle@ldi.nrw.de

Right to Object

If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

After an objection, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If personal data processing is carried out for the purpose of direct marketing, you can object to this processing at any time by notifying us. After an objection, we will stop processing the data concerned for direct marketing purposes.