Privacy policy
Privacy Policy
1. Introduction
We would like to use the information below to provide you, the data subject, with an overview of how we process your personal data and your rights under data protection law. In principle, it is possible to use our website without entering any personal data. If you wish to use certain services provided by our company through our website, however, we may need to process personal data. Where it is necessary to process personal data and there is no legal basis for this processing, we will generally obtain your consent.
Personal data, such as your name, address or email address, is always processed in compliance with the EU General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection provisions applicable to bugatti GmbH. The purpose of this Privacy Notice is to inform you about the scope and purpose of the personal data we collect, use and process.
As the data controller responsible for processing, we have implemented extensive technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed on this website. However, web-based data transmission involves a certain degree of risk in terms of cybersecurity, which means we are unable to guarantee absolute protection. Because of this, you are free to send us personal data using alternative means, such as by telephone or by post.
You can also take simple and easy-to-implement measures to safeguard your data unauthorised from third-party access. Below we provide some tips on how you can safeguard your personal data:
● Protect your account (login credentials, user or customer account) and IT system (computer, laptop, tablet or mobile device) with secure passwords.
● Make sure that no one else has access to your passwords.
● Use different passwords for every account (login credentials, user or customer account).
● Do not use the same password for different websites, applications or online services.
● The following applies in particular to the use of publicly accessible or shared IT systems: You should always log off once you are finished after logging in to a website, application or online service.
Passwords should be at least 12 characters long and must not be easy to guess. They should not contain common everyday words, your own name or the names of relatives. Instead, passwords should consist of a mixture of uppercase and lowercase letters, numbers and special characters.
2. Data Controller
The data controller, as defined by the GDPR, is:
bugatti GmbH
Hansastr. 55, 32049 Herford, Germany
The data controller’s representatives are: Klaus Brinkmann, Wolfgang Brinkmann
3. Data protection officer
You can contact the data protection officer using the following contact information:
Thomas Otten
Telephone: +49 (0)5221 87292-08
Fax: +49 (0)5221 87292-49
Email: datenschutz-bugatti@audatis.de
You can contact our data protection officer directly for any questions or proposals you may have concerning data protection at any time.
4. Glossary
This Privacy Policy uses the terms used by the European legislators in charge of issuing directives and regulations for the enactment of the EU General Data Protection Regulation (GDPR). Our Privacy Notice is intended to be easily readable and understandable by the public, as well as our customers and business partners. To ensure this is the case, we would like to take a moment to explain the terms used.
Among others, this Privacy Policy uses the following terms:
1. Personal data
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
2. Data subject
A data subject is any identified or identifiably natural person whose personal data is being processed by the controller responsible for processing (our company).
3. Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
4. Restriction of processing
Restriction of processing means labelling stored personal data with the aim of restricting its future processing.
5. Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
6. Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, given that such additional information is kept separate and subject to technical and organisational measures that ensure that the personal data is not linked to an identified or identifiable natural person.
7. Data processor
The data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
8. Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
9. Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
10. Consent
Consent is any unambiguous voluntary declaration of consent given by the data subject for a specific case in an informed manner in the form of a statement or other action clearly confirming consent with which the data subject indicates their agreement to their personal data being processed.
5. Legal basis for processing
The legal basis for our company’s data processing activities is Article 6 Paragraph 1(a) GDPR (in conjunction with Section 25 (1) of the Telecommunications Digital Services Data Protection Act (TDDDG, formerly TTDSG)), whereby we obtain consent for a certain processing purpose.
If the processing of personal data is necessary to execute a contract to which you are party, as is the case for processing operations, for example, that are necessary to deliver goods or provide services or considerations, processing is based on Article 6 Paragraph 1(b) GDPR. The same is true of processing operations required to carry out pre-contractual measures, such as in cases where we receive queries regarding our products or services.
If our company is subject to a legal obligation whereby it is necessary to process personal data, such as to meet tax obligations, processing is based on Article 6 Paragraph 1(c) GDPR.
In rare cases, it may be necessary to process personal data in order to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor to our business were to be injured and their name, age, insurance information or other vital information needed to be disclosed to a physician, hospital or other third party. In this case, processing would be based on Article 6 Paragraph 1(d) GDPR.
Lastly, processing activities may be based on Article 6 Paragraph 1(f) GDPR. Processing operations not covered by any of the above legal bases are based on this legal basis if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh this processing. In particular, we are permitted to engage in these kinds of processing operations because they have been explicitly enumerated by the European legislature. In this respect, it took the view that a legitimate interest could be assumed if you were a customer of our company (Recital 47 Sentence 2 GDPR).
Our services are primarily aimed at adults. Persons under the age of 16 may not transfer any personal data to us without the consent of their parent or guardian. We do not request or collect personal data from children or adolescents, or share it with third parties.
6. Transmission of data to third parties
Your personal data will not be transferred to third parties for any purposes other than those listed below.
We will only share your personal data with third parties if:
1. You have given us your explicit consent to do so in accordance with Article 6 Paragraph 1(a) GDPR;
2. The disclosure is permissible in accordance with Article 6 Paragraph 1(f) GDPR in order to safeguard our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed;
3. We are legally required to disclose the data in question pursuant to Article 6 Paragraph 1(c) GDPR; and
4. Disclosure is permitted by law and is required for processing our contractual relationship with you in accordance with Article 6 Paragraph 1(b) GDPR.
As part of the processing described in this Privacy Notice, your personal data may be transferred to the United States. Companies in the United States only offer an adequate level of data protection if they been certified under the EU-US Data Privacy Framework and are thereby covered under the adequacy decision adopted by the European Commission in accordance with Article 45 GDPR. We have made explicit mention of this for the service providers concerned in the Privacy Notice. In order to safeguard your data in all other cases, we have concluded data processing agreements on the basis of the European Commission's Standard Contractual Clauses (SCCs). If the SCCs are not sufficient to establish an adequate level of security, your consent can be used as a legal basis for data transfers to third countries in accordance with Article 49 Paragraph 1(a) GDPR. This does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Article 45 GDPR.
7. Technology
7.1 SSL/TLS encryption
In order to guarantee the security of data processing and to protect the transmission of confidential content, such as orders, login details or contact requests you send to us as the website operator, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by looking at the address bar in your browser. If the connection is encrypted, the address will read “https://” instead of “http://” and a lock symbol will appear in your browser bar.
We use this technology to safeguard your transferred data.
7.2 Data collection when visiting the website
When using our website merely for informational purposes, i.e. if you do not register for an account or otherwise send us information or do not consent to processing that requires your consent, we only receive the data considered technically necessary for us to display our website. This generally involves data your browser sends to our servers (in what are known as server log files). Our website collects a range of general data and information each time you access a page or an automated system. This general data and information is stored in the server’s log files. We may record:
1. the browser types and versions used;
2. the operating system used by the accessing system;
3. the website that led the accessing system to our website (called the referrer);
4. the sub-pages the accessing system navigates to on our website;
5. the date and time of access to the website;
6. an abbreviated Internet Protocol address (anonymised IP address),
7. the internet service provider for the accessing system.
We do not use this general data and information to draw any conclusions about you. Instead, we need this information to
1. correctly deliver the content on our website;
2. to optimise the content of our website and advertising for this content;
3. to ensure the long-term functionality of our IT systems and the technology behind our website; and
4. to provide law enforcement authorities with the information needed for prosecution in the event of a cyber attack.
We statistically analyse the data and information collected and further analyse it with the aim of increasing data protection and data security within our company to ultimately ensure an optimal level of protection for the personal data being processed by us. The anonymous data from the server log files is stored separately from all personal data provided by a data subject.
The legal basis for this data processing is Article 6 Paragraph 1(f) GDPR. Our legitimate interest here is based on the purposes for data collection listed above.
7.3 Encrypted payment transactions
If you are required to transfer to us your payment information (e.g. your account number if direct debit authorisation is issued) after the conclusion of a contract involving payment, this data will be required to process your payment.
Payment transactions using standard payment methods (Visa/MasterCard or direct debit) take place exclusively on an encrypted SSL or TLS connection. You can recognise an encrypted connection by looking at the address bar in your browser. If the connection is encrypted, the address will switch from “http://” to “https://” and a lock symbol will appear in your browser bar.
We use this technology to safeguard your transferred data.
7.4 Amazon CloudFront (content delivery network)
We use Amazon CloudFront, a web service provided by Amazon Web Services Inc., 410 Terry Avenue North, 98109, Seattle, Washington, USA.
Amazon CloudFront is a content delivery network (CDN). It manages the transfer of information between your browser and our website via the CloudFront network. This reduces the latency with which we can deliver static and dynamic web content. It also improves the security of our website through traffic encryption and access controls.
CloudFront also stores cookies on your computer to optimise this service. You can delete cookies in your browser, allow cookies to be set only in individual cases and activate the automatic deletion of cookies when your browser is closed.
Amazon Web Services receives and processes personal data as our data processor under EU Standard Contractual Clauses. CloudFront collects statistics about visits to our website. This includes but is not limited to:
● IP address
● Website visited
● Referrer URL
● Browser type
● Operating system
● Device type
If you have consented to the use of CloudFront, the legal basis for the processing of your personal data is Article 6 Paragraph 1(a) GDPR. In addition, it is in our legitimate interest as defined by Article 6 Paragraph 1(f) GDPR to use CloudFront to optimise our website and make it safer without having to operate a content delivery network ourselves. Amazon Web Services will store the personal data for as long as it is required to fulfil the purpose described.
Die Amazon Web Services Inc. is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more detailed information on CloudFront, please visit: https://aws.amazon.com/cloudfront/.
7.5 CloudFlare (content delivery network)
Our website uses CloudFlare features provided by CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.
CloudFlare offers a content delivery network with DNS servers distributed around the globe. The transfer of information between your browser and our website technically takes place on the CloudFlare network. As a result, CloudFlare is able to analyse the data traffic between users and our websites in order to detect and prevent attacks on our services, for example. In addition, CloudFlare may store cookies on your computer for optimisation and analysis purposes.
You can set your browser to notify you when cookies are set and to allow cookies to be set only in individual cases, to exclude the acceptance of cookies in specific cases or in general, and to activate the automatic deletion of cookies when your browser is closed. The functionality of this website may be restricted if cookies are disabled.
We have concluded a corresponding data processing agreement with CloudFlare on the basis of the GDPR and EU Standard Contractual Clauses. CloudFlare collects statistical data about your visit to this website. The collected access data includes: Name of the accessed web page, file, date and time of access, amount of data transmitted, notification of successful access, browser type and version, the user's operating system, the referrer URL (the previously visited page), IP address and the requesting provider. CloudFlare uses the log data for statistical analyses in order to operate, safeguard and optimise the website.
If you have consented to the use of CloudFlare, the legal basis for the processing of your personal data is Article 6 Paragraph 1(a) GDPR. In addition, we have a legitimate interest in using CloudFlare to optimise our website and make it more secure. The corresponding legal basis for this is Article 6 Paragraph 1(f) GDPR. Your personal data will be stored for as long as it is required to fulfil the purpose of processing. The data will be erased as soon as it is no longer required for the purpose of processing.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on CloudFlare, please visit: https://www.cloudflare.com/privacypolicy/.
7.6 Hosting by Amazon Web Services - AWS
We host our website with Amazon Web Services (AWS), a service provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg.
When you visit our website, your personal data is processed on AWS servers. Personal data may also be transferred to the parent company of AWS located in the United States.
The use of AWS takes place on the basis of Article 6 Paragraph 1(f) GDPR. We have a legitimate interest in ensuring that our website is as reliable as possible.
We have concluded a data processing agreement with AWS. This agreement is required under data protection law and guarantees that AWS only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on AWS’s privacy policy, please visit: https://aws.amazon.com/privacy/
7.7 Hosting by Shopify
We host our website with Shopify, a service provided by Shopify Inc, 151 O'Connor St - K2P 2M5 Ottawa, Canada.
When you visit our website, your personal data (e.g. IP addresses in log files) is processed on Shopify servers.
The use of Shopify takes place on the basis of Article 6 Paragraph 1(f) GDPR. We have a legitimate interest in ensuring that the display, provision and security of our website is as reliable as possible.
We have concluded a data processing agreement (DPA) with Shopify in accordance with Article 28 GDPR. This agreement is required under data protection law and guarantees that Shopify only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
For more information about Shopify’s privacy policy, please visit: https://www.shopify.com/uk/legal/privacy.
7.8 jsDelivr
Our website features jsDelivr components provided by Prospect One, Królewska 65A/1, PL-30-081 Kraków, Poland.
We use the open-source service jsDelivr on our website to deliver content from our website to users' various devices as quickly and technically seamlessly as possible.
jsDelivr is a content delivery network (CDN) that distributes the content on our website across different servers to ensure optimal worldwide accessibility. A CDN typically uses servers located geographically close to the website user. It can therefore be assumed that users within the EU will receive content from servers also located within the EU. In order to provide our content, jsDelivr collects user data such as your IP address.
jsDelivr does not use cookies or similar tracking technologies, according to the provider, only the ones considered necessary for the above technical reasons.
This data processing takes place on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
The jsDelivr Privacy Policy is available at: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.
7.9 Shopify (CDN + Stats)
Our website features components from Shopify, including Shopify CDN and Shopify Stats.
We use Shopify CDN to ensure optimised, fast and dynamic file transformation.
Shopify Stats provides us with key data on sales, orders, and online shop visitors.
These components are provided by Shopify Inc., 151 O'Connor St ・ K2P 2M5 Ottawa, Canada.
Shopify is a leading e-commerce platform that allows us to create, operate and manage online shops. The platform offers a wide range of tools and services that make it easier for us to sell our products online.
Shopify uses functional cookies to remember choices you've made or information you've provided.
reporting and analytics cookies to collect information about how you use our website or their website, and how often
Data collected as a result may include:
● Username, language and region in which the user is located
● IP address
● Technical data needed to play back video or audio content (e.g. image quality, network connection speed and buffering parameters)
● User settings related to a service across several pages
Advertising cookies are used on our website to tailor marketing to you and your interests and provide you with a more personalised service in the future. These cookies remember that you visited our website and Shopify may share this information with third-parties, such as advertisers. Although these cookies can track your device visits to our website and other sites, they typically cannot personally identify you.
For all transfers outside the EEA, appropriate safeguards will be put in place in accordance with European law.
The transfer of your personal data to Canada takes place on the basis of Standard Contractual Clauses.
If you have been asked to consent to the processing of your data by Shopify, the corresponding processing takes place on the legal basis of Article 6 Paragraph 1(a) GDPR. In addition, we have a legitimate interest in using Shopify to display and manage our website. The corresponding legal basis for this is Article 6 Paragraph 1(f) GDPR.
Your personal data will be stored for as long as it is required to fulfil the purpose of processing. The data will be erased as soon as it is no longer required for the purpose of processing.
Shopify’s privacy policy is available at: https://www.shopify.com/uk/legal/privacy.
8. Cookies
8.1 General information about cookies
Cookies are small files automatically generated by your browser and stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.
Information generated from the specific device used is stored in the cookies. However, this does not mean that cookies provide us with direct knowledge of your identity.
The use of cookies helps us design our services so they are more convenient for you to use. As such, we use what are known as session cookies to recognise that you may have already visited individual pages on our website. These cookies are automatically erased once you leave our website.
We also use temporary cookies to optimise user-friendliness. These temporary cookies are stored on your device for a specific period of time. When you return to our website to make use of our services, the system automatically recognises that you have visited us before and remembers the information you entered and the settings you adjusted so you do not have to re-enter this information.
In addition, we use cookies to statistically analyse the use of our website and for the purpose of optimising our services for you, the user. These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically erased after the set time period in each case. The respective storage duration of the cookies can be found in the settings of the consent tool used.
8.2 Legal basis for the use of cookies
The processing of data through cookies for the proper functioning of our website is therefore justified in order to safeguard our legitimate interests as well as those of third parties in accordance with Article 6 Paragraph 1(f) GDPR.
You have granted your consent to all other cookies in our opt-in cookie banner in accordance with Article 6 Paragraph 1(a) GDPR.
9. Our website’s content
9.1 Registering as a user
You have the option of entering personal data to register on our website.
Each input mask you use for registration will determine what personal data is sent to us during the registration process. The personal data you enter is exclusively collected and stored for our own internal use and for our own purposes. We may disclose data to one or more data processors, such as a parcel service provider. These data processors also only use this personal data for their own internal use on our behalf.
By registering on our website, the IP address assigned by your internet service provider (ISP) and the date and time of registration will also be stored. This data is stored against the backdrop that only by doing so can we prevent our services from being misused, and that this data may enable us to clear up any crimes committed. In this respect, it is necessary for us to store this data for our own protection. As a matter of principle, we do not disclose this data to third parties unless there is a legal obligation to do so or unless the data is used for criminal prosecution.
By voluntarily entering personal data when registering, you are also enabling us to offer you content or services that can only be offered to registered users due to their nature. Registered persons have the option to amend the personal data they entered during the registration process at any time or to have it completely erased from our database.
Upon request, we will provide you with information regarding what personal data relating to you we have stored at any time. In addition, we will rectify or erase personal data upon request by you, provided this does not contravene any statutory retention obligations. A data protection officer, as specified in this Privacy Notice, and all other employees are available to the data subject for contact in this regard.
Your data is processed in the interests of the convenient and easy use of our website. This represents a legitimate interest as defined by Article 6 Paragraph 1(f) GDPR.
9.2 Data processing when opening a customer account and for the purposes of contract execution
In accordance with Article 6 Paragraph 1(b) GDPR, personal data is collected and processed if you send us this data to execute a contract or open a customer account. The data collected is shown in each input form. You can erase your customer account at any time by sending a message to the data controller’s address specified above, among other methods. We store and use the data you provide us in order to execute contracts. Once the contract has been fully executed or your customer account has been erased, your data will be blocked – taking into account retention periods under fiscal and commercial law – and erased once these periods expire unless you have expressly consented to the further use of your data or we reserve the right to further use your data as permitted by law. If the latter is the case, we will inform you of this.
9.3 Data processing for handling orders
The personal data collected by us will be passed on to the transport company commissioned with delivery as part of the execution of the contract, insofar as this is necessary for the delivery of the goods. We will pass on your payment information to the appointed credit institution as part of payment processing, insofar as this is necessary to process your payment. If payment service providers are used, we will explicitly inform you of this below. The legal basis for these data transfers is Article 6 Paragraph 1(b) GDPR.
9.4 Conclusion of contracts in the online shop, with retailers and for shipping
The personal data collected by us will only be passed on to third parties, i.e. the company commissioned to deliver the goods or the credit institute appointed to process payments, to the extent deemed necessary for the execution of the contract. Your data will not be otherwise transferred unless you have explicitly consented to the transfer in question. Your data will not be passed on to third parties without your explicit consent, e.g. for advertising purposes.
The legal basis for this data processing is Article 6 Paragraph 1(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract.
9.5 Correspondence; contact form
We collect personal data if you share it with us when you contact us (e.g. via a contact form or email). If you contact us using the contact form, the data collected is shown in the respective contact form. This data is stored and used exclusively for the purpose of responding to your query or for contacting you and the related technical administration. The legal basis for this data processing is our legitimate interest in responding to your query in accordance with Article 6 Paragraph 1(f) GDPR. If you contact us with the objective of concluding a contract, Article 6 Paragraph 1(b) GDPR constitutes an additional legal basis for the processing. Your data will be erased once your query has been closed, which is the case once it can be deduced from the circumstances that the matter at hand has been clarified and no statutory retention periods prevent the deletion of your data.
9.6 Application management; job board
We collect and process the personal data of applicants in order to manage the application process. Data may also be electronically processed, in particular when an applicant sends us their application documents electronically, e.g. by email or using a web form on our website. If we conclude an employment or service contract with an applicant, the data provided will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If we do not conclude a contract with the applicant, the application documents will be automatically deleted six months after the applicant is notified of the rejection of their application, provided that we have no other overriding legitimate interests that prevent its deletion. In this case, a further legitimate interest may include an obligation to provide evidence in proceedings under the General Equal Treatment Act (Allgemeine Gleichbehandlungsgesetz, AGG).
The legal basis for this data processing is Article 6 Paragraph 1(b), Article 88 GDPR in conjunction with Section 26 Paragraph 1 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
10. Newsletters
10.1 Newsletter distribution to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for goods or services similar to those already purchased from our range by email. We do not have to obtain any separate consent from you for this purpose in accordance with Section 7 (3) of the Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG). In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Article 6 Paragraph 1(f) GDPR. If you have initially objected the use of your email address for this purpose, we will not send you any related emails. You are entitled to object the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the data controller stated at the start of this Privacy Notice accordingly. You will only incur transmission costs according to basic rates for this notification. Upon receipt of your objection, we will stop using your email address for advertising purposes immediately.
10.2 Marketing newsletter
You have the option to subscribe to our company’s newsletter on our website. The input mask used to subscribe will determine what personal data is sent to us when subscribing to the newsletter.
We use the newsletter to inform our customers and business partners about our products, services and offers at regular intervals. You are generally only able to receive our company’s newsletter if
1. you have a valid email address; and
2. you have registered to receive the newsletter.
For legal reasons, we employ a double-opt-in procedure by first sending you a confirmation email to the email address you entered when subscribing to the newsletter. This confirmation email allows for verification as to whether you, as the owner of the email address, have authorised a subscription to this newsletter.
When subscribing to the newsletter, we also store the IP address assigned by your internet service provider (ISP) used by your IT system at the time of subscription and the date and time of your subscription. We need to collect this data to be able to trace (possible) misuse of your email address at a later point in time, which means the collection of this data serves our own legal protection.
The personal data collected as part of the newsletter subscription process is exclusively used to send our newsletter. In addition, subscribers to the newsletter may receive information via email, provided this is necessary to run the newsletter service or related registration, as may be the case in the event of changes to the newsletter service offered or changes to technical conditions. The personal data collected as part of the newsletter service is not disclosed to third parties. You can terminate your subscription to our newsletter at any time. You may revoke your consent to the storage of personal data granted when you subscribed to the newsletter at any time. A corresponding link is provided in each newsletter so you can revoke your consent. In addition, you have the option to unsubscribe from the newsletter at any time directly on our website or by notifying us of your wish to unsubscribe using other means.
The legal basis for data processing for the purpose of sending the newsletter is Article 6 Paragraph 1(a) GDPR.
11. Our presence on social networks
We maintain our own pages on social networks to enable us to communicate with you directly and inform you about our services. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the related processing in terms of the processing operations triggered by your visit pursuant to Article 26 GDPR.
We are not the original provider of these pages, but use them only within the scope of the options offered to us by the respective providers.
Therefore, as a precautionary measure, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Visits to our social network pages may therefore entail data protection risks for you, since it could be difficult to protect your rights to information, deletion, objection, etc., and social networking sites are often used by service providers directly for advertising purposes or to analyse user behaviour; something we are unable to influence. If user profiles are created by the provider, cookies are often used and/or data on usage behaviour is assigned to the social network profile created by you.
The above processing of personal data takes place in accordance with Article 6 Paragraph 1(f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to communicate with you in a modern manner or to inform you about our services. If you, as a user, are required to grant consent to data processing by the respective providers, the legal basis for this processing is Article 6 Paragraph 1(a) GDPR in conjunction with Article 7 GDPR.
As we do not have access to the providers' databases, please note that it is best to exercise your rights (to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data on social networks is listed below for each of the social network providers we use:
11.1 Facebook
(Joint) controller for data processing in Europe:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
Unless you have objected to this processing, Meta (Facebook) reserves the right to process content from adult users located in the European Union, e.g. photographs, posts or comments, in order to train its AI models. This processing takes place on the basis of Facebook’s legitimate interest in accordance with Article 6 Paragraph 1(f) GDPR. As a company, we have no influence on this specific data processing by Meta. Users can object to this processing using an online form available on Meta platforms.
Privacy policy (data policy):
https://www.facebook.com/about/privacy
11.2 Instagram
(Joint) controller for data processing in Germany:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
Unless you have objected to this processing, Meta (Instagram) reserves the right to process content from adult users located in the European Union, e.g. photographs, posts or comments, in order to train its AI models. As a company, we have no influence on this specific data processing by Meta. The basis is that of legitimate interest in accordance with Article 6 Paragraph 1(f) GDPR. Users can object to this processing using an online form available on Meta platforms.
Privacy policy (data policy):
https://instagram.com/legal/privacy/
11.3 LinkedIn
(Joint) controller for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy policy:
https://www.linkedin.com/legal/privacy-policy
11.4 Pinterest
(Joint) controller for data processing in Germany:
Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA
Privacy policy:
https://policy.pinterest.com/en-gb/privacy-policy
11.5 TikTok
(Joint) controller for data processing in Germany:
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Privacy policy:
https://www.tiktok.com/legal/page/row/privacy-policy/en
11.6 X (Twitter)
(Joint) controller for data processing in Europe:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy:
https://x.com/en/privacy
Information about your data:
https://x.com/settings/your_twitter_data
11.7 XING (New Work SE)
(Joint) controller for data processing in Germany:
New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
Privacy policy:
https://privacy.xing.com/en/privacy-policy
Information requests for XING members:
https://www.xing.com/settings/privacy/data/disclosure
11.8 YouTube
(Joint) controller for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy:
https://policies.google.com/privacy
12. Social media plugins
12.1 Facebook plugin
We have integrated components from Facebook onto our website. Facebook is a social network.
A social network is an online social meeting place, an online community that usually allows users to communicate with each other and interact on an online platform. A social network can act as a platform for exchanging views and experiences; it allows the online community to provide personal or business-related information. Facebook allows users of the social network to create private profiles, upload photos and network with features such as friend requests.
Facebook is operated by Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside of the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages on which a Facebook component (Facebook plug-in) has been integrated is accessed, the Internet browser on your IT system is automatically prompted to download the corresponding Facebook component from Facebook by the Facebook plugin. A complete overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific subpage of our website you have visited.
If you are logged into Facebook when you visit our website, Facebook detects which specific subpage of our website you are visiting each time you access our website and during the entire duration of the respective visit to our website. This information is collected by the Facebook component and assigned by Facebook to your Facebook account. If you press one of the Facebook buttons integrated on our website, such as the "Like" button, or leave a comment, Facebook assigns this information to your personal Facebook user account and stores this personal data.
Facebook is informed by the Facebook component that you have visited our website if you are logged into Facebook when your visit our website; this takes place regardless of whether you have clicked on the Facebook component or not. If you would prefer to prevent this information being transferred to Facebook, you can do so by logging out of your Facebook account before visiting our website.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
Personal data is processed using the social media buttons only with your explicit consent pursuant to Article 6 Paragraph 1(a) GDPR.
The data policy published by Facebook provides information about the collection, processing and use of personal data by Facebook and can be found at https://www.facebook.com/about/privacy/previous. The policy also explains how Facebook settings can be configured to protect your privacy. In addition, various applications are available that make it possible to prevent data transfers to Facebook. You can use these applications to prevent your data from being transferred to Facebook.
12.2 Instagram plugin
We have integrated components from Instagram onto our website. Instagram is a service that qualifies as an audiovisual platform that allows users to share photos and videos and redistribute such data on other social networks.
Instagram services are operated by Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
Each time one of the individual pages on which an Instagram component (Instagram button) has been integrated is accessed, the applicable Instagram component automatically prompts the Internet browser on your IT system to download a representation of the appropriate component from Instagram. As part of this technical process, Instagram receives information about which specific subpage of our website you have visited.
If you are logged into Instagram when you visit our website, Instagram detects which specific subpage you are visiting each time you access our website and during the entire duration of the respective visit to our website. This information is collected by the Instagram component and assigned by Instagram to your Instagram account. If you press one of the Instagram buttons integrated on our website, Instagram assigns the data and information transmitted by doing so to your personal Instagram user account and stores and processes this data and information.
Instagram is informed by the Instagram component that you have visited our website if you are logged into Instagram when your visit our website; this takes place regardless of whether you have clicked on the Instagram component or not. If you would prefer to prevent this information being transferred to Instagram, you can prevent this transfer by logging out of your Instagram account before visiting our website.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
Personal data is processed using the social media buttons only with your explicit consent in accordance with Article 6 Paragraph 1(a) GDPR.
For more information and to see the applicable Instagram privacy policy, please visit https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
12.3 LinkedIn plugin
We have integrated components from LinkedIn Corporation onto our website. LinkedIn is a web-based social network that lets users connect to existing business contacts and make new business contacts.
LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for privacy policy issues outside the USA.
Each time you visit our website where a LinkedIn component (LinkedIn plug-in) is installed, this component causes the browser you use to download a corresponding representation of the LinkedIn component. For more information about LinkedIn plugins, please visit https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about which specific subpage of our website you visited.
If you are logged into LinkedIn when you visit our website, LinkedIn detects which specific subpage of our website you are visiting each time you access our website and during the entire duration of the respective visit to our website. This information is collected by the LinkedIn component and assigned by LinkedIn to your LinkedIn account. If you press one of the LinkedIn buttons integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores this personal data.
LinkedIn is informed by the LinkedIn component that you have visited our website if you are logged into LinkedIn when your visit our website; this takes place regardless of whether you have clicked on the LinkedIn component or not. If you would prefer to prevent this information being transferred to LinkedIn, you can prevent this transfer by logging out of your LinkedIn account before visiting our website.
Your data may be transferred to the United States and Singapore as part of the data processing undertaken by LinkedIn. This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures. In addition, the security of the data transfer is generally ensured by Standard Contractual Clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to the level guaranteed by the GDPR. If the SCCs are not sufficient to establish an adequate level of security, your consent to this processing will be obtained in accordance with Article 49 Paragraph 1(a) GDPR.
Personal data is processed using the social media buttons only with your explicit consent in accordance with Article 6 Paragraph 1(a) GDPR.
LinkedIn provides options for unsubscribing from email notifications, SMS notifications and targeted advertisements and lets you manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners that may set cookies, such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame. You can reject such cookies by going to https://www.linkedin.com/legal/cookie-policy. To view the current LinkedIn privacy policy, please visit https://www.linkedin.com/legal/privacy-policy. The LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy.
13. Web analysis
13.1 Adobe Analytics (Omniture)/Adobe Marketing Cloud
We have integrated components from Adobe onto our website. These components are provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe Analytics (Omniture) and Adobe Marketing Cloud (Omniture) are tools that enable more efficient online marketing and web analysis. Omniture is part of the Adobe Marketing Cloud. The Adobe Marketing Cloud enables real-time analysis of website traffic flows. This real-time analysis includes project reports and permits ad hoc analyses of website visitors. Customer interactions are presented in a way that gives us a better overview of website users’ online activities by displaying data in simple and interactive dashboards and converting it into reports. This enables us to receive information in real time and to identify problems more quickly.
Omniture stores a cookie on your IT system. With a server setting, we ensure that the tracking data transferred to Adobe's data centre is anonymised before geolocation. Anonymisation is implemented by replacing the last part of the IP address. We have configured server-side settings to independently make your IP address anonymous before it is processed for geolocating and measuring reach. Adobe uses the data and information obtained from our website on our behalf to evaluate your user behaviour. Adobe also uses the data to produce reports on user activities on our behalf and to provide other services to our company that are related to the use of our website. Adobe does not merge your IP address with any other personal information.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Adobe Inc. is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
Omniture’s privacy policy is available at: https://www.adobe.com/uk/privacy/policy.html
13.2 Meta Pixel (formerly Facebook Pixel)
This website uses the Facebook Pixel provided by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (Meta). If explicit consent is given, this allows the behaviour of users to be tracked after they have viewed or clicked on a Facebook ad. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes, and can contribute to the optimisation of future ad campaigns.
When you visit our website, the following data may be processed by the Meta Pixel:
● IP address
● Device information
● Browser history
● Interactions on our website (e.g. page views, clicks, conversions)
The collected data is stored and processed by Meta to allow Meta to link the data to your user profile and use the data for its own advertising purposes in accordance with the Meta (Facebook) data use policy (https://www.facebook.com/about/privacy/)). This enables Meta and its partners to display advertisements on and outside of Facebook. In addition to this, a cookie may be stored on your computer for these purposes.
Meta stores the collected data for a period of 180 days and then deletes it if the user does not visit our website again in the meantime.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
13.3 Google Analytics 4 (GA4)
On our website we use Google Analytics 4 (GA4), a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).
In this context, pseudonymised user profiles are created and cookies (see Cookies section) are stored. The information generated by the cookie about your use of this website may include:
● Temporary recording of your IP address without permanent storage
● Location data
● Browser type/version
● Operating system used
● Referrer URL (previous page visited)
● Time of the server request
The pseudonymised data may be transferred by Google to a server in the US and stored there.
The information is used to evaluate the use of our website, to compile reports on website activities and to provide other services related to the use of our website and the Internet for the purposes of market research and needs-based design of this website. Google may also transfer this information to third parties, provided this is required by law or if third parties process this data on behalf of Google.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1 (a) GDPR.
Google's default data retention period is 14 months. Otherwise, your personal data will be stored for as long as it is required to fulfil the purpose of processing. The data will be erased as soon as it is no longer required for the purpose of processing.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on data protection when using GA4, please visit: https://support.google.com/analytics/answer/12017362?hl=en.
13.4 Google Analytics Universal
On our website we use Google Analytics, a web analysis service provided by Google Ireland Limited (https://about.google/), Gordon House, Barrow Street, Dublin 4, Ireland (Google). In this context, pseudonymised user profiles are created and cookies (see the “Cookies” section) are stored. The information generated by the cookie about your use of our website, such as
1. Browser type/version
2. Operating system used
3. Referrer URL (the previously visited page)
4. Host name of the accessing computer (IP address)
5. Time of the server request
will generally be transmitted to and stored on a Google server in the US. The information is used to evaluate the use of our website, to compile reports on website activities and to provide other services related to the use of our website and the Internet for the purposes of market research and needs-based design of this website. Google may also transfer this information to third parties, provided this is required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other data from Google. IP addresses are anonymised so that they cannot be assigned to specific users (IP masking).
You can prevent the installation of the cookies by adjusting your browser settings accordingly; however, please be advised that doing so may prevent you from being able to use all the functions of our website to their full extent.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
You can also prevent Google from collecting and processing the data recorded by the cookie about your use of the website (including your IP address) by downloading and installing a browser plugin (https://tools.google.com/dlpage/gaoptout?hl=en).
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google Analytics privacy policy is available at: https://support.google.com/analytics/answer/6004245?hl=en.
13.5 ID5.io
We have integrated components from ID5.io onto our website. ID5.io is a service provided by ID5 Technology Ltd, based at 15 Bishopsgate, London EC2N 3AR, United Kingdom.
ID5.io offers technologies that allow websites, apps or other Internet-based objects to analyse the behaviour of visitors or users. The service provider collects and analyses user behaviour and preferences in order to help its customers achieve the most effective marketing possible. For this purpose, information about the browser used, the user’s device, IP addresses and about the visited websites is collected. This data is stored for the duration for which the cookies are set.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1 (a) GDPR.
For more information on ID5.io, please visit: https://www.id5.io/platform-privacy-policy/.
13.6 LinkedIn Analytics
We use the retargeting tool and conversion tracking provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn) on our website.
For this purpose, we have integrated the LinkedIn Insight Tag onto our website, which allows LinkedIn to collect statistical data about your visit and use of our website, and to provide us with corresponding aggregated statistics on this basis. We also use this service to provide you with tailored and relevant offers and recommendations if you have visited our website to find out about specific services, information and offers. The relevant information is stored in a cookie.
As a rule, the following data is collected and processed in relation to this plugin:
● IP address
● Device information
● Browser information
● Referrer URL
● Time stamp
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR. We will save the data until you withdraw your consent.
Your data may be transferred to the United States and Singapore as part of the data processing undertaken by LinkedIn. This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures. In addition, the security of the data transfer is generally ensured by Standard Contractual Clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to the level guaranteed by the GDPR. If the SCCs are not sufficient to establish an adequate level of security, your consent to this processing will be obtained in accordance with Article 49 Paragraph 1(a) GDPR.
For more information on LinkedIn’s privacy policy, please visit: https://www.linkedin.com/legal/privacy-policy.
13.7 Microsoft Clarity
On our website, we use Microsoft Clarity (“Clarity”), a web analytics service provided by Microsoft Corp., One Microsoft Way, Redmond, Washington, USA.
In this context, pseudonymised user profiles are created and cookies are stored on your device.
Data processed in relation to Microsoft Clarity includes but is not limited to:
● Browser type/version
● Operating system used
● Referrer URL (previous page visited)
● Host name of the accessing computer (IP address)
● User behaviour on the website visited
● Mouse movements and clicks
The information is used to evaluate the use of our website, to compile reports on website activities and to provide other services related to the use of our website and the Internet for the purposes of market research and needs-based design of this website.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
Microsoft’s privacy policy is available at: https://www.microsoft.com/en-gb/privacy/privacystatement.
13.8 NEORY
We use NEORY, a service provided by NEORY GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany, to improve and optimise our website.
NEORY, analyses user behaviour in order to deliver targeted advertisements and effectively implement retargeting campaigns.
The personal data processed in this case includes but is not limited to:
● Type of device and browser used
● Operating system
● Browser language
● IP address
● Internet provider
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
For more information on NEORY, please visit: https://www.neory.com/privacy-policy.
13.9 Outbrain Pixel
We use Outbrain Pixel, a service provided by Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA, for conversion tracking on our website.
This allows the actions of users to be tracked once they have been redirected to a provider’s website by clicking on an Outbrain ad. This enables the effectiveness of Outbrain advertisements to be evaluated for statistical and market research purposes, and can contribute to the optimisation of future ad campaigns. The collected data is anonymous, which prevents us from drawing any conclusions regarding the identity of the user.
You can set your browser to notify you when cookies are set and to allow cookies to be set only in individual cases, to exclude the acceptance of cookies in specific cases or in general, and to activate the automatic deletion of cookies when your browser is closed. The functionality of this website may be restricted if cookies are disabled.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
For more information on Outbrain, please visit: https://www.outbrain.com/legal/privacy#privacy-policy.
13.10 Taboola
We use Taboola, a service provided by Taboola, Inc., 1115 Broadway, 7th Floor, New York, New York 10010, USA, on our website.
Taboola enables us to display user-specific advertisements based on the user’s surfing behaviour and interests. Taboola uses cookies to determine which websites you visit frequently and how you navigate our website. For this purpose, device-related data and log data are collected and usage profiles are generated using pseudonyms. These user profiles are not merged with data about the bearer of the pseudonym and do not allow conclusions to be drawn about your personal data. Your IP address, for example, will be transmitted to Taboola in a truncated form.
Taboola processes the following data:
● Landing page
● Next page visited
● Pages visited
● Clicks
● Data to convert the user status
● Operating system and browser used
You can set your browser to notify you when cookies are set and to allow cookies to be set only in individual cases, to exclude the acceptance of cookies in specific cases or in general, and to activate the automatic deletion of cookies when your browser is closed. The functionality of this website may be restricted if cookies are disabled.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
For more information on Taboola’s privacy policy, please visit: https://www.taboola.com/privacy-policy.
14. Advertising
14.1 Adcell
Our website features components from Adcell, a service provided by Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany. Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an online form of distribution that enables commercial website operators, i.e. the merchants or advertisers, to display advertisements, which are generally remunerated by clicks or sale commissions, on third-party websites, i.e. with sales partners, which are otherwise referred to as affiliates or publishers. The merchant provides ad material via the affiliate network, i.e., an advertising banner or other suitable means of online advertising, which is then integrated by an affiliate onto their websites or advertised via other channels, such as keyword advertising or email marketing.
Adcell stores a cookie on your IT system. The Adcell tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner that referred the potential customer, as well as the reference number of the visitor to the website and the clicked advertisement are stored. This data is stored in order to facilitate the processing of commission payments between a merchant and the affiliate, which are processed by the affiliate network, i.e. Adcell.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
Adcell’s privacy policy is available at: https://www.adcell.de/agb [in German only].
14.2 Adform
We use the online marketing service provided by Adform A/S, Silkegade 3B, DK 1113 Copenhagen K, CVR no. 26 43 48 15 on our website.
Adform helps us to create and display personalised and interest-based digital advertisements on our website.
Adform uses cookies, beacons, tagging scripts, mobile SDKs and pixels to collect and process data. The following data is collected in relation to Adform:
● Cookie ID
● Mobile advertising ID
● Cross-device ID
● Partner ID
● The browser type and settings configured by the user
● Information on the operating system used on the user’s device
● Information on cookie IDs and other identifiers associated with the user’s device
● IP addresses
● Information on the interaction and activity of visitors to our website
● Location information (city, region, postcode) for the user’s device or mobile application when our website is visited derived from truncated IP addresses or truncated GPS data
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
Your data will be erased no later than 13 months after it was collected.
For more information on Adform’s privacy policy, please visit: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/.
14.3 Adyoulike
We use the services provided by Adyoulike for our marketing. Adyoulike (https://www.adyoulike.com/) is an advertising service provider headquartered in 88 Av. Charles de Gaulle 92200 Neuilly-sur-Seine, France.
The data stored and processed by Adyoulike includes but is not limited to:
● User behaviour on our website (navigation data)
● Browser type and settings
● Information on the operating system on the user’s device
● Cookie IDs
● IP addresses
Adyoulike also collects personal information in connection with contact forms, such as:
● First name and surname
● Email address
● Telephone number
Adyoulike stores collected personal data for a maximum of 13 months. The cookies expire after two months.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
For more information on Adyoulike’s privacy practices, please visit: https://www.adyoulike.com/privacy_policy.php.
14.4 Google Ads (AdWords) Remarketing/Retargeting
Our website features Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).
This means that we advertise this website in Google search results, as well as on third-party websites. For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.
Any further data processing will only take place if you have consented to Google linking your Internet and app browsing history to your Google account and information from your Google account is used to personalise advertisements that you view on the web. In this case, if you are logged in to Google when you visit one of the pages of our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data by Google in order to create target groups.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google Ads privacy policy and further information is available at: https://www.google.com/policies/technologies/ads/.
14.5 Google AdSense
Our website features Google AdSense components, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense is an online service that enables us to place advertisements on third-party websites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party sites based on the content of the respective third-party site. Google AdSense allows interest-based targeting of Internet users through the creation of individual user profiles.
We use the Google AdSense component to incorporate advertisements on our website. Google AdSense stores a cookie on your IT system. By storing the cookie, Alphabet Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA, is able to analyse the use of our website. Each time one of the individual pages on which a Google AdSense component has been integrated is accessed, the Internet browser on your IT system is automatically prompted by the corresponding Google AdSense component to send data to Alphabet Inc. for online marketing purposes and commission payments. As part of this technical process, Alphabet Inc. receives information on personal data, such as your IP address, which is used by Alphabet Inc., among other things, to trace the origin of visitors and clicks and subsequently to calculate commission.
Google AdSense also uses tracking pixels. A tracking pixel is a thumbnail image that is embedded in websites to enable log file recording and analysis, allowing statistical analysis to be performed. Based on the embedded tracking pixel, Alphabet Inc. can detect whether and when a website was opened by your IT system and which links you clicked on. Tracking pixels are used, among other things, to evaluate the flow of visitors to a website.
Google AdSense transfers personal data and information, including the user’s IP address, required to collect and calculate billing for advertisements displayed to Alphabet Inc. in the US. This personal data is stored and processed in the US. Alphabet Inc. may share this personal data collected as part of this technical process with third parties.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google AdSense privacy policy and further information is available at: https://adsense.google.com/start/ and //www.google.com/policies/technologies/ads/
14.6 Google Ads with conversion tracking
Our website features Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an online advertising service that allows advertisers to place advertisements in both Google's search engine results and Google's advertising network. Google Ads allows advertisers to specify certain keywords in advance, which are then used to display advertisements in Google's search engine results only when the user enters a keyword-relevant search query into the search engine. Advertisements are distributed to relevant websites in the Google advertising network using an automatic algorithm and taking into account predefined keywords.
We use Google Ads to promote our website by displaying interest-based advertisements on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertisements on our website.
If you reach our website by clicking on a Google ad, a conversion cookie is stored on your IT system by Google. A conversion cookie expires after 30 days and is not used to identify you. If the conversion cookie has not yet expired, is used to track whether certain sub-pages, such as the shopping cart from the online shop, have been accessed on our website. The conversion cookie allows both us and Google to track whether a user who has reached our website via an AdWords ad has generated a sale, i.e., completed or cancelled a purchase.
The data and information collected through the use of the conversion cookie is used by Google to compile visitor statistics for our website. We use these visitor statistics to determine the total number of users who have been directed to us via advertisements, i.e. to determine the success or failure of the respective advertisements and to optimise our advertisements for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify you.
The conversion cookie is used to store personal information, such as the websites you visit. Each time you visit our websites, personal data, including the IP address of the Internet connection you use, is transferred to Google in the US. This personal data is stored by Google in the US. Google may share this personal data collected as part of this technical process with third parties.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google AdSense privacy policy and further information is available at: https://policies.google.com/privacy?hl=en-US.
14.7 Google Ads with enhanced conversions
Our website features Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads is an online advertising service that allows advertisers to place advertisements in both Google’s search engine results and Google’s advertising network. We use Google Ads to promote our website by displaying interest-based advertisements on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertisements on our website.
If you reach our website by clicking on a Google ad, a conversion cookie is stored on your IT system by Google. A conversion cookie expires after 30 days and is not used to identify you. If the conversion cookie has not yet expired, is used to track whether certain sub-pages, such as the shopping cart from the online shop, have been accessed on our website. The conversion cookie allows both us and Google to track whether a user who has reached our website via a Google AdWords advertisement has generated a sale, i.e., completed or cancelled a purchase.
We use Google Ads with enhanced conversions For this purpose, we transfer personal data we have collected, such as phone numbers or email addresses, to Google. This data is matched with event data from Google Ads to track more conversions.
Each time you visit our websites, personal data, including the IP address of the Internet connection you use, is transferred to Google in the US. Google may share the personal data collected as part of this technical process with third parties.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google Ads privacy policy and further information is available at: https://policies.google.com/privacy?hl=en-US and https://support.google.com/google-ads/answer/9888656?hl=en-GB.
14.8 Google Ads – additional information on basic consent mode
Google is required by the Digital Markets Act to obtain the user’s consent before any user data is processed by Google for personalised advertisements. Google meets this requirement with consent mode. Users are obliged to implement consent mode and thereby prove that they have obtained the consent of website visitors.
Google offers two implementation modes; basic and advanced.
We use the basic implementation mode for Google consent mode. Only once you have consented to the use of Google Ads (see above) will a link be established to Google, a Google code executed and the aforementioned processing carried out. If you do not consent to the use of Google Ads, Google is only informed that you have not provided your consent. The Google Code will not run and no Google Ads cookies will be set.
14.9 LinkedIn Ads
Our website features LinkedIn Ads, a service provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
We use LinkedIn Ads to advertise our company on the social network Linkedin. For this purpose, Linked places a cookie in the browser of your device, which automatically enables interest-based advertising based on the pages you have visited.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR. Your data will be erased as soon as it is no longer required to fulfil the purpose of processing or you withdraw your consent.
Your data may be transferred to the United States and Singapore as part of the data processing undertaken by LinkedIn. This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures. In addition, the security of the data transfer is generally ensured by Standard Contractual Clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to the level guaranteed by the GDPR. If the SCCs are not sufficient to establish an adequate level of security, your consent to this processing will be obtained in accordance with Article 49 Paragraph 1(a) GDPR.
For more information on LinkedIn’s privacy policy, please visit: https://www.linkedin.com/legal/privacy-policy.
14.10 Microsoft Bing Ads
Our website features Microsoft Bing Ads, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland.
Bing Ads is an online advertising service that allows advertisers to place advertisements in both Bing's search engine results and Bing's advertising network. We use Bing Ads to promote our website by displaying interest-based advertisements on the websites of third-party companies and in the search engine results of the Bing search engine and by displaying third-party advertisements on our website.
Microsoft Bing Ads conversion tracking allows us and Microsoft to see whether users have performed certain actions. For example, we analyse which buttons on our website are clicked frequently and which products are viewed or purchased particularly often. This information is used to generate conversion statistics. We receive information on the total number of users who clicked on our advertisements, as well as details of the actions taken. Data that could be used to personally identify the user is not collected. Microsoft uses cookies or similar technologies for identification and recognition purposes.
The data processed in relation to this includes but is not limited to:
● IP address (without permanent storage)
● Browser details
● Visited URL
● Referrer URL (previous page visited)
● Time of the server request
● User behaviour
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The data may be transferred to a server in the US and stored there. Microsoft Corporation is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Microsoft Bing Ads privacy policy and additional information is available at: https://about.ads.microsoft.com/en-us/resources/policies/remarketing-in-paid-search-policies.
14.11 Trade Desk
We use Trade Desk on our website to display interest-based advertisements to website visitors. Trade Desk is a service provided by The Trade Desk, Inc., 42 N. Chestnut Street, Ventura, CA 93001.
Trade Desk stores cookies to recognise users when they visit websites that are part of Trade Desk’s advertising network.
The personal data processed in this case includes but is not limited to:
● IP address
● Device information
● Browser data
● Location information
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on Trade Desk, please visit: https://www.thetradedesk.com/general/privacy.
14.12 Trbo (banner only)
We work with the service provider trbo GmbH, Leopoldstr. 41, 80802 Munich, Germany (http://www.trbo.com/) to display content on our website.
If you have consented to the use of analysis and marketing services pursuant to Article 6 Paragraph 1(a) GDPR, which permits us to display interest-based advertisements, corresponding targeted advertisements will be displayed by Trbo Only Banner. A connection to the servers of Zebrafish Labs, Inc. is established for this purpose.
If you have consented to the use of Trbo Only Banner, the legal basis for the processing of your personal data is Article 6 Paragraph 1(a) GDPR. In addition, we have a legitimate interest in using Trbo Only Banner to optimise our website and make it more secure. The corresponding legal basis for this is Article 6 Paragraph 1(f) GDPR.
For more information on trbo’s privacy practices, please visit: https://www.trbo.com/privacy-policy/.
15. Partner and affiliate programs
15.1 AWIN
We participate in the affiliate program of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.
AWIN enables us to track which third-party websites, apps or other technologies referred potential customers to our websites and apps (referrer) and pay them a commission in return for these referrals.
AWIN uses cookies in order to track visitors referred by our partners’ affiliate links and to trace the origin of orders. Both AWIN and the respective AWIN affiliate partners collect the following data independently:
● Affiliate partner identification number
● User identification number
● Information on the clicked ad material
● Order/product ID
● User agent
● IP address
Affiliate partners may vary and are not limited in terms of number or identity. AWIN requires all partners to comply with data protection.
If personal data is transferred to AWIN Group companies or to service providers in countries that have not already been granted an adequate level of protection on the basis of an adequacy decision by the European Commission, special contracts are concluded using the European Commission’s SCCs in order to ensure that personal data is handled by all parties in a manner that is compatible with and respects the laws on data protection, in particular the GDPR.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
Your data will be erased as soon as it is no longer required to fulfil the purpose of processing or you withdraw your consent.
For more information on AWIN’s privacy policy, please visit: https://www.awin.com/gb/privacy.
15.2 DoubleClick
This website contains components from DoubleClick by Google. DoubleClick is a trademark of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) under which special online marketing solutions are marketed to advertising agencies and publishers.
DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to be sent to your browser. If your browser accepts this request, DoubleClick stores a cookie on your IT system. The purpose of the cookie is to optimise and display advertisements. The cookie is used, among other reasons, to place and display user-relevant advertisements and to create reports on ad campaigns or to improve them. Furthermore, the cookie helps to prevent the same advertisement from being displayed multiple times.
DoubleClick uses a cookie ID that is required to complete the technical process. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid displaying them multiple times. Furthermore, DoubleClick can track conversions using the cookie ID.
DoubleClick cookies do not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns that you have interacted with.
Each time one of the individual pages on which a DoubleClick component has been integrated is accessed, the Internet browser on your IT system is prompted by the corresponding DoubleClick component to send data to Google for online marketing purposes and commission payments. As part of this technical process, Google receives information about data that Google also uses to generate commission statements. Among other things, Google can verify that you have clicked on certain links on our website.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
DoubleClick by Google’s privacy policy is available at: https://policies.google.com/privacy?hl=en-US.
15.3 YieldKit
This website contains YieldKit components, a service provided by YieldKit GmbH, Jahnstraße 44b, 20303 Hamburg. YieldKit is a German affiliate network that offers affiliate marketing. Affiliate marketing is an online form of distribution that enables commercial website operators, i.e. the merchants or advertisers, to display advertisements, which are generally remunerated by clicks or sale commissions, on third-party websites, i.e. with sales partners, which are otherwise referred to as affiliates or publishers. The merchant provides ad material via the affiliate network, i.e., an advertising banner or other suitable means of online advertising, which is then integrated by an affiliate onto their websites or advertised via other channels, such as keyword advertising or email marketing.
YieldKit stores a cookie on your IT system. The YieldKit tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner that referred the potential customer, as well as the reference number of the visitor to the website and the clicked advertisement are stored. This data is stored in order to facilitate the processing of commission payments between a merchant and the affiliate, which are processed by the affiliate network, i.e. YieldKit.
This data processing takes place on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
YieldKit’s privacy policy is available at: https://www.yieldkit.com/privacy-policy.
16. Plugins and other services
16.1 Adobe Fonts
On our website we use Adobe Fonts, a service provided by Adobe Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA. We use Adobe Fonts to display fonts in a uniform manner.
The data processed in relation to this includes but is not limited to:
● IP address
● The time it takes for the web browser to download the fonts
● The time from when the fonts are downloaded by the web browser to the application of the fonts
● Whether an ad blocker is installed to determine whether the ad blocker is affecting the proper tracking of page views
● Operating system and browser version
If you have been asked to consent to the processing of your data by Adobe, the corresponding processing takes place on the legal basis of Article 6 Paragraph 1(a) GDPR. In addition, we have a legitimate interest in using Adobe Fonts to display and manage our website. The corresponding legal basis for this is Article 6 Paragraph 1(f) GDPR.
Adobe Inc. is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
Adobe Fonts’ privacy policy is available at: https://www.adobe.com/uk/privacy.html.
16.2 Adobe Typekit
We use Adobe Typekit for the visual design of our website. Typekit is a service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. By using Typekit, we are granted access to a font library on Adobe servers (headquartered in the US). In order to integrate the fonts we use, your browser establishes a connection to an Adobe server in the US in order to dynamically download the font required for our website. Adobe is consequently informed that our website has been accessed from your IP address.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Adobe Inc. is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Typekit privacy policy is available at: https://www.adobe.com/privacy/policies/adobe-fonts.html.
16.3 BidSwitch
We use services provided by BidSwitch GmbH, Bahnhofstrasse 28, Postfach 7563 Zug, 6302, Switzerland on our website.
BidSwitch helps us connect SSPs and DSPs through a single interaction and efficiently connect with multiple advertising partners.
BidSwitch uses cookies, web beacons and flash cookies for the collection and use of data.
Data collected as a result may include:
● IP address of the end user
● Information about your browser
● Information about your device
● Location information
● Personal data
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The transfer of your personal data to the US takes place on the basis of Standard Contractual Clauses.
For all other transfers outside the EEA, appropriate safeguards will be put in place in accordance with European law.
Your data will be erased as soon as it is no longer required to fulfil the purpose of processing or you withdraw your consent.
For more information on BidSwitch’s privacy policy, please visit: https://www.iponweb.com/policies-legal/bidswitch-privacy-policy/?__hstc=213410059.cfa7d058d200b9bd4f1dfc47fc4ec5aa.1694681621495.1694681621495.1694681621495.1&__hssc=213410059.2.1694681621495&__hsfp=3479673314.
16.4 Google Maps
We use Google Maps (API), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Maps is a web service that displays interactive (land) maps to visualise geographic information. Use of this service allows you to view our location and plan your route more easily, along with other features.
When you access sub-pages on which the Google Maps component is integrated, information about your use of our website (such as your IP address) is transferred to Google servers in the US and saved there if you have consented to this in accordance with Article 6 Paragraph 1(a) GDPR. In addition, Google Maps also loads Google Web Fonts, Google Photos and Google stats. These services are also provided by Google Ireland Limited. When you visit a page featuring a Google Maps component, your browser loads the web fonts and photos required to display Google Maps into your browser cache. Your browser also establishes a connection to the Google servers for this purpose. This informs Google that our website has been accessed by your IP address. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your profile to be linked to Google, you first need to log out of your Google user account. Google stores your data (even for users who are not logged in) in user profiles and evaluates these profiles. You have the right to object to the formation of these user profiles. You must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google in connection with your use of Google Maps, you can also completely disable the Google Maps web service by turning off the JavaScript application in your browser. You will then not be able to use Google Maps and also the map display on our website.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
Google's Terms of Service are available at https://policies.google.com/terms?hl=en-US and the Google Maps Platform Terms of Service at https://cloud.google.com/maps-platform/terms.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
The Google Maps privacy policy (Google Privacy Policy) is available at: https://policies.google.com/privacy?hl=en-US.
16.5 Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This tool allows “website tags” (i.e., keywords that are embedded in HTML elements) to be implemented and managed via a user interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked and then track which content on our website is of particular interest to you.
The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not have access to this data. If you have disabled it at the domain or cookie level, this setting will apply to all tracking tags implemented with Google Tag Manager.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on Google Tag Manager and Google privacy policy, please visit: https://policies.google.com/privacy?hl=en-US.
16.6 Google WebFonts
We use Google Web Fonts to display fonts in a uniform manner on our website. Google WebFonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on Google WebFonts and the Google privacy policy, please visit: https://developers.google.com/fonts/faq and https://www.google.com/policies/privacy/.
16.7 MediaMath
We use MediaMath Analytics & Insights, a web analytics service provided by MediaMath Inc. to display interest-based advertisements to visitors to our site through the MediaMath advertising network. This services is provided by MediaMath, Inc. 4 World Trade Centre, 45th Floor, New York, NY 10007, USA.
The data processed in relation to MediaMath includes but is not limited to:
● Browser type
● Operating system
● Browser language
● IP address
● Internet provider
MediaMath processes the data associated with your device under a pseudonym known as a MediaMath ID. This MediaMath ID may then be stored in a cookie on your device and helps to provide you with relevant advertisements.
This processing takes place exclusively when you have explicitly granted your consent to it in accordance with Article 6 Paragraph 1(a) GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on MediaMath, please visit: https://www.mediamath.com/blog/privacy-hub/.
16.8 Salesforce CRM system
We use the CRM system provided by salesforce.com Inc. (salesforce), One Market Street, Suite 300, San Francisco, CA 94105, USA.
Salesforce is a cloud-based CRM solution for managing customer relationships. All departments (including Marketing, Sales, Customer Service as well as Online and Retail) work on a shared CRM platform. Among other things, this platform is used for structured contract processing and documentation of contract initiation. Salesforce has full access to the customer data we process and store in the cloud. This data may include names, addresses, email addresses and phone numbers.
If your consent to this processing has been obtained, this data processing takes place on the basis of Article 6 Paragraph 1(a) GDPR. The legal basis for the use of salesforce in the context of contractual relationships is Article 6 Paragraph 1(b) GDPR. In all other cases, the legal basis for the processing of your personal data is Article 6 Paragraph 1(f) GDPR. In this scenario, we have a legitimate interest in the effective coordination of internal and external correspondence and the management of customer relationships.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 GDPR, meaning that a transfer of personal data may also take place without further guarantees or additional measures.
For more information on Salesforce, please visit: https://www.salesforce.com/company/legal/privacy/.
16.9 Use of RestockRocket (restockrocket.io)
On our website/store, we use the RestockRocket service for automated stock management, monitoring stock levels and receiving notifications of reorders and shortages. In order to provide these services, technical connection and inventory data is transferred when data is exchanged between our system and RestockRocket (e.g. product/article numbers, stock levels, order/transaction identifiers, email addresses for notifications if applicable, and technical metadata such as IP address, time of request and user agent).
RestockRocket processes this information on its own responsibility or as a processor for synchronisation, alerting, evaluation, and support of the service. The provider may appoint sub-processors, use cookies or similar tracking technologies and, if necessary, transfer data to countries outside the EEA. Contractual safeguards (e.g. processing agreement, SCCs) and technical safeguards are in place for these transfers.
For more details on the nature and scope of the processing, as well as information on data security and third-country transfers, please refer to the RestockRocket privacy policy. On request, we will be happy to provide you with information on the processing/data privacy agreement concluded with the provider and on the safeguarding measures taken.
16.10 Use of Storeify (storeify.app)
On our website/shop, we use the Storeify service (storeify.app) to manage product data, stock levels and order processes as well as to synchronise with external sales channels. When data is exchanged between our system and Storeify, technical connection data (e.g. IP address, time of request, browser/user agent), product/article identifiers, stock levels, order/transaction data and – if notifications are received – email addresses are processed.
Storeify generally performs this processing as a service provider for us. However, the provider may appoint sub-processors and use cookies or similar technologies to provide the service. Data transfers to non-EEA countries may occur, in which case appropriate safeguards (e.g. SCCs and technical/organisational measures) will be contractually agreed.
Detailed information on Storeify’s data processing (including the sub-processors used, possible cookies, retention periods and safeguarding measures) can be viewed in the Storeify privacy policy. On request, we will be happy to provide you with a copy of the processing or data privacy agreement concluded with the provider.
16.11 ROEYE/roeye.com
We use services provided by roeye.com for advertising purposes. These services are provided only once consent has been granted in accordance with Article 6 Paragraph 1(a) GDPR.
16.12 Use of Acxiom (agkn.com)
Our website uses services provided by Acxiom Corporation (“Acxiom”), in particular the domain agkn.com, to collect pseudonymous information about usage behaviour and use it to control interest-based advertising. For this purpose, cookies or similar technologies may be used that enable your browser to be recognised across different websites.
The data processed via Acxiom is usually pseudonymised and is used to assign users to specific interest profiles in order to provide more relevant advertising content. There is no direct identification of your person.
You can object to the collection and processing of data by Acxiom at any time. For information on opt-out options, please visit: https://www.acxiom.com/privacy/
16.13 Use of Adobe Audience Manager (demdex.net)
We use Adobe Audience Manager, a service provided by Adobe Inc., on our website. Cookies or similar technologies are set by the domain demdex.net to collect pseudonymous information about user behaviour. This data is used to assign users to specific target groups or interest segments and to display personalised or target group-related content or advertising.
The data processed in this case is usually pseudonymised and does not allow any direct conclusion to be drawn about your identity. Adobe may also combine the collected information with other data of its own to improve accuracy in the formation of its target groups.
You can object to processing by Adobe Audience Manager at any time. Opt-out options can be found at: https://www.adobe.com/uk/privacy/opt-out.html
16.14 Criteo.net
This website uses features provided by Criteo, including a JavaScript tag that Criteo uses to track the behaviour of users while browsing our website. The provider is Criteo SA, 32 Rue Blanche, 75009 Paris, France (hereinafter referred to as “Criteo”).
Criteo is used to show you interest-based advertisements within the Criteo advertising network. Your interests are determined on the basis of your previous user behaviour. For example, Criteo records the products you have looked at, added to your shopping cart or purchased. For more details on the data collected by Criteo, please visit: https://www.criteo.com/privacy/how-we-use-your-data/
To ensure that we can show you interest-based advertisements, we and other Criteo partners need to be able to recognise you. For this purpose, a cookie is stored on your device or a similar identifier is used to link your user behaviour to a pseudonymous user profile. To see Criteo’s privacy policy, please visit: https://www.criteo.com/privacy/
Criteo is used on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
16.15 Usemax
We use Usemax advertisement services provided by Emego GmbH, Rheinpromenade 13, 40789 Monheim, Germany. This service is used to display advertising and offers both on-site optimisation and e-mail retargeting.
When a user visits our website, the usemax ad server sets a cookie that contains a reference to that user’s surfing behaviour. The information collected by this cookie is used to customise and personalise the user experience via the website or via advertising placements on third-party websites that are connected to usemax.
Category: marketing
Provider: Emego GmbH, Rheinpromenade 13, 40789 Monheim, Germany
Legal basis: consent in accordance with Article 6 Paragraph 1(a) GDPR
Processed data:
Time that the website was visited, accessed page URL, IP address, Internet service provider, browser, operating system, screen resolution, referrer, place, category_id, product_id, basket_amount, checkout_amount, order_id
Cookies and storage duration: 1 year
Place of processing: European Union
Disclosure to third countries and guarantees: none.
For more information, please visit: https://www.usemax.de/?l=privacy [available in German only]
Users can erase their collected data by following the link below:
https://www.usemax.de/index.php?l=rm&kunde=&id=1 [available in German only]
When you click the link, the browser sets an opt-out cookie. If you delete the opt-out cookie, data collection will restart on your next visit. The objection therefore applies only to the device and web browser on which the opt-out cookie was saved.
Cookies and storage duration: 1 year
Place of processing: European Union
Disclosure to third countries and guarantees: none.
For more information, please visit: https://www.usemax.de/?l=privacy [available in German only]
Users can erase their collected data by following the link below:
https://www.usemax.de/index.php?l=rm&kunde=&id=1 [available in German only]
When you click the link, the browser sets an opt-out cookie. If you delete the opt-out cookie, data collection will restart on your next visit. The objection therefore applies only to the device and web browser on which the opt-out cookie was saved.
16.16 smartadserver/Equativ
We use the smartserver.com service on our website for marketing purposes on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR. The service is provided by Equativ, 66 Rue de la Chaussée d’Antin, 75009 Paris, France.
16.17 360 Polaris/Improve digital/360yield.com
We have integrated 360 Polaris on our website. 360 Polaris is a service provided by Improve Digital BV that displays targeted advertising for users. 360 Polaris uses cookies and other browser technologies to analyse user behaviours and recognise users. 360 Polaris collects information on visitor behaviour on various websites. This information is used to optimise the relevance of advertising. 360 Polaris also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transferred to the provider. In this case, your data will be passed on to the operator of 360 Polaris, Improve Digital BV, Beechavenue 182, 1119 PX Schiphol-Rijk, Netherlands.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be traced back to you as a natural person, but are used for segmentation when displaying advertisements, for example.
Purpose and legal basis
360 Polaris is used on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR and Section 25 Paragraph 1 TDDDG (German Telecommunications Digital Services Data Protection Act, formerly TTDSG).
Storage duration
We have no influence over the specific storage duration for the processed data; instead, it is determined by Improve Digital BV. For more information, see the 360 Polaris privacy policy at https://www.improvedigital.com/privacy-policy/.
16.18 Casale Media/Index Exchange
We use the web service provided by Casale Media Inc., 74 Wingold Avenue, M6B1P5 Toronto, Canada (hereinafter referred to as Casale Media). We use this data to ensure that our website has full functionality. In this context, your browser may transfer personal data to Casale Media. The legal basis for this data processing is Article 6 Paragraph 1(f) GDPR. Our legitimate interest is in ensuring the faultless operation of our website. The European Commission has found that an adequate level of data protection exists in Canada, which means that the export of data to Canada can be permitted. The data will be erased as soon as the purpose of its collection has been fulfilled. For more information on how the transferred data is handled, please refer to the Casale Media privacy policy: http://casalemedia.com/. You can prevent the collection and processing of your data by Casale Media by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find such a script blocker at www.noscript.net or www.ghostery.com, for example). For more information on the European Union adequacy decision, see: https://ec.europa.eu/info/law/law-topic/data-protection_en
16.19 Google Hosted Libraries and jQuery, AngularJS and others
1. Google Hosted Libraries: We use the Google Hosted Libraries service to provide commonly used JavaScript libraries, such as jQuery, AngularJS and others, on our website. These libraries are loaded by Google’s servers to reduce our website’s loading time and improve performance.
2. Purpose of use: We use the data collected by Google Hosted Libraries exclusively for the following purposes:
o To improve our website’s loading times and performance
o To provide a stable and reliable user experience
Storage and protection of data
When you visit our website, certain information, including your IP address, is transmitted to Google. This information may be stored and processed in the USA. Google undertakes to protect the data in accordance with the applicable data protection regulations.
Data sharing
We do not share the data collected by Google Hosted Libraries with third parties unless it is required by law or necessary for the provision of our services. Google may use the data collected in accordance with its own privacy policy. See Google’s privacy policy for more information.
https://policies.google.com/privacy
16.20 Use of Klaviyo
For e-mail marketing and analysis purposes, we use services provided by Klaviyo, 125 Summer Street, Boston, MA 02110, USA. Klaviyo enables us to manage our newsletter subscriptions, create targeted campaigns and analyse user behaviour related to our e-mails (e.g. open and click rates).
When you register for the newsletter, your email address and any other information you provide voluntarily will be recorded and stored on Klaviyo’s servers. Klaviyo may also use cookies and similar technologies to analyse the behaviour of visitors to the website and personalise content – this is done only with your explicit consent in accordance with Article 6 Paragraph 1(a) GDPR through our consent management tool.
The transfer of data to the USA takes place on the basis of EU Standard Contractual Clauses. For more information, see the Klaviyo privacy policy at: https://www.klaviyo.com/legal/privacy-policy
16.21 Rubicon/Magnite
We use the Rubicon service provided by Rubicon Project (12181 Bluff Creek Drive Playa Vista, CA 90094, USA, hereinafter referred to as Rubicon). This software/cookie specialises in the automated processing of the purchase and sale of online advertising. In the process of displaying advertisements, Rubicon Project uses cookies and pixels for the purpose of selecting and providing interest-based advertising and for measuring and statistically evaluating the effectiveness of the advertisements delivered. The service is used on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
16.22 Kupona
We use the targeting and tracking technology provided by KUPONA GmbH, Frankfurter Straße 8, 36043 Fulda, Germany (Kupona), to optimise the display of online marketing campaigns. Kupona uses cookies to collect anonymised information and data on the surfing behaviour of users. Following an algorithm-based analysis of surfing behaviour, KUPONA may also make targeted product recommendations on other websites in the form of product-specific advertising banners. The use of cookies serves only to optimise the service; the user is not personally identified and data is not passed on to third parties. If you still want to object to the use of anonymised cookie files and analysis of your surfing behaviour, you can do so on the following page: Link: https://www.kupona.de/datenschutz [available in German only]
16.23 Description of the Matomo Cloud service
Matomo Cloud is a web analytics service that helps us analyse user behaviour on our website so that we can optimise our content and improve the user experience. Matomo Cloud stores the collected data on servers hosted by Matomo. Matomo Cloud acts as a data processor and processes data exclusively on our behalf and in accordance with our instructions.
1. Scope of data processing
When using Matomo Cloud, the following data is processed:
• IP address: Matomo anonymises user IP addresses by removing the last two octets of the IP address (e.g. 192.168.xxx.xxx is displayed). The anonymised IP address cannot be assigned to a specific user.
• Usage data: Matomo collects data about user behaviour on our website. This includes information, such as the pages visited, the amount of time spent, the referrer URL (previous website visited), click behaviour, and technical information on the device used and the browser (e.g. device type, operating system and screen resolution).
• Cookies: Matomo uses cookies to collect information for analysing user behaviour. These cookies do not store any personal data.
2. Legal basis for processing
The aforementioned data is processed on the basis of Article 6 Paragraph 1(f) GDPR. Our legitimate interest is in analysing usage behaviour on our website and continuously optimising our products and services.
3. Transfer of data and recipients
The data is stored and processed on Matomo Cloud servers in the European Union. Matomo Cloud acts as our data processor and is permitted only to process the data in accordance with our instructions. The data is not transmitted to third parties.
4. Storage of data
The collected data is saved in anonymised form for a period of 12 months and is then automatically erased.
16.24 Media.net
We use services provided by medianet electronic communication & Marketing GmbH, Humboldtstraße 65, 60318 Frankfurt am Main, Germany.
These services are loaded only once consent has been obtained in accordance with Article 6 Paragraph 1(a). For more information. please visit: https://www.medianet.de/de/datenschutz [available in German only]
16.25 Mediavine
We use services provided by the advertising network operated by Mediavine Inc. on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR. Mediavine transfers advertisements to your browser. Your IP address is passed on to Mediavine in the process. Furthermore, additional Mediavine functions (cookies, JavaScript, web beacons and similar) may also be used to measure the effectiveness of its advertising campaigns and/or to personalise the advertising content on our site. Without the consent of the user, only non-personalised advertisements are delivered. Consent to personalised advertisements can be withdrawn or changed at any time by clicking the appropriate link in the footer of the page. An overview of all the third-party providers used by Mediavine can be found at mediavine.com/gdpr/.
16.26 Bing Ads
(1) Our website uses the Bing Ads remarketing feature provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Microsoft Advertising). Microsoft Bing Ads stores a cookie on your computer if you have accessed our website via a Microsoft Bing ad. This allows both us and Microsoft Bing to recognise when someone has clicked an advertisement, has been redirected to our website or has reached a predefined landing page (conversion page). We only obtain information regarding the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user is provided.
(2) If you do not want information about your behaviour to be used by Microsoft as explained above, you can reject the setting of any cookie required for this purpose – for example, by using a browser setting that generally disables the automatic setting of cookies. You can also prevent Microsoft from collecting and processing the data recorded by the cookie about your use of the website by declaring your objection using the following link: http://choice.microsoft.com/en-US/opt-out. For more information about data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website at https://privacy.microsoft.com/en-us/privacystatement
16.27 Postrelease.com/Nativo
We use marketing services provided by Postrelease.com on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
16.28 Use of Nexxen/Tremorhub (tremorhub.com)
On our website, we use services provided by Nexxen (formerly Tremor International) through the domain tremorhub.com to collect pseudonymous usage data. This data is collected using cookies, tracking technologies and, where applicable, device-specific identifiers (e.g. IP address, device ID) and used with the aim of creating audience segments and displaying interest-based advertising.
The data processed in this case is predominantly pseudonymised and does not allow any direct conclusion to be drawn about your person.
You can object to processing by Nexxen for advertising purposes. For opt-out information, please consult the Nexxen privacy policy at: https://nexxen.com/privacy-data-subject-rights-request/
16.29 OptinMonster
We use OptinMonster, a plugin from Retyp LLC, 7732 Maywood Crest Dr., West Palm Beach, FL 33412, USA (https://optinmonster.com) to provide our visitors with additional services via a pop-up layer on our website (for example, to allow them to register their email address for a newsletter or to highlight promotions). OptinMonster uses cookies to do so. Personal data is only collected through an active action by the customer (e.g. if the customer subscribes to the newsletter via a pop-up). OptinMonster does not store the collected data on its own servers; instead, it passes such data directly to us. We have concluded a contract with OptinMonster for data processing on our behalf, in which we oblige OptinMonster to protect your data in accordance with the applicable provisions of the GDPR. You can restrict or disable the use of cookies in your browser settings at any time.
More detailed information on how OptinMonster handles the customer’s personal data is provided in the OptinMonster privacy policy (https://optinmonster.com/privacy/).
16.30 PubMatic
For marketing purposes, we use services provided by PubMatic, Inc., 305 Main Street, First Floor, Redwood City, CA 94063, USA, on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR. For more information, please visit: https://pubmatic.com/legal/privacy/
16.31 Use of Adscale
We use Adscale, a service for displaying and optimising online advertising, on our website. Adscale uses cookies and similar technologies to collect pseudonymous information about user behaviour (e.g. pages visited, interactions and technical device information).
This data is used to form target audiences, display interest-based advertisements and measure advertising campaign performance. Users are not identified directly; the data is processed on a pseudonymous basis.
You can object to Adscale’s use of interest-based advertising at any time by using any common opt-out pages for online marketing (e.g. https://www.youronlinechoices.com).
16.32 Teads Universal Pixel
We use Teads Universal Pixel (Teads Schweiz GmbH, Ausstellungsstrasse 50, 1020 Vienna) to track user behaviour. The installed Teads Pixel sends a signal every time a user visits our website. Teads can then confirm whether it already knows the user or not. If the user is already known to Teads, the user is excluded from our campaign. If the user is not known to Teads, Teads does nothing, because the Pixel only reads out users who have already consented to the Teads cookie on their device and thus to tracking. The sole purpose of this Pixel is to analyse whether the Teads cookie has already been installed on the user’s device. If this is the case, the Teads cookie then identifies the Teads user who visited our website and excludes the user from our campaign.
The Teads Pixel provides access to the following information and technical characteristics of the device: current URL, Auctid parameter (optional parameter that Teads sends via the target URL), device, browser and operating system. No personal data is exchanged. The Pixel is not used to collect or share personal data. Teads distributes the True Visits campaign through its own cookie pool and acts as a data processing controller for the provision of the Teads True Visits service. The cookies are set on Teads Publisher Network websites once consent has been given; this consent can be verified by Teads at any time. The data is only evaluated if such a cookie is already present before the user visits the website. For more information on data protection by Teads, please visit the link: https://www.teads.com/privacy-policy/
16.33 Use of redintelligence.net/The Reach Group
Our website uses the service redintelligence.net to collect pseudonymous information on usage behaviour and to use it to display and optimise online advertising. Cookies or similar tracking technologies that allow users to be assigned to specific target groups or interest segments may be used for this purpose.
The data subjects are not identified directly; the data is processed on a pseudonymous basis. The collected data may be used to improve the relevance of advertising content and evaluate the performance of campaigns.
You can object to the use of interest-based advertising at any time using industry-standard opt-out sites (e.g. https://www.youronlinechoices.com).
16.34 Triple Lift Ads
We have integrated Triple Lift Ads on our website. Triple Lift Ads is a service provided by Triple Lift, Inc. that displays targeted advertising for users. Triple Lift Ads uses cookies and other browser technologies to analyse user behaviours and recognise users. Triple Lift Ads collects information on visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Triple Lift Ads also delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transferred to the provider. In this case, your data will be passed on to the operator of Triple Lift Ads: Triple Lift, Inc., New York, New York, USA.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be traced back to you as a natural person, but are used for segmentation when displaying advertisements, for example.
Triple Lift Ads is used on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR and Section 25 Paragraph 1 TDDDG (German Telecommunications Digital Services Data Protection Act, formerly TTDSG).
We have no influence over the specific storage duration for the processed data; instead, it is determined Triple Lift, Inc.. For more information, see the Triple Lift Ads privacy policy: https://triplelift.com/privacy/.
16.35 Use of Adition (adition.com)
Our website uses Adition, a service for displaying and optimising online advertising via the domain adition.com. In this case, cookies or similar technologies are set to collect pseudonymous information about user behaviour.
The data collected is used to create target groups, personalise advertising and measure advertising effectiveness. Users are not identified directly; the data is processed on a pseudonymous basis.
You can object to the use of interest-based advertising at any time using industry-standard opt-out options (e.g. https://www.youronlinechoices.com).
16.36 Use of Yieldlab (yieldlab.net)
Our website uses Yieldlab, a service for displaying and optimising online advertising via the domain yieldlab.net. In this case, cookies or similar technologies are set to collect pseudonymous information about user behaviour.
The data collected is used to create target groups, personalise advertising and rate and optimise advertising campaigns. Users are not identified directly; the data is processed on a pseudonymous basis.
You can object to the use of interest-based advertising at any time using industry-standard opt-out options (e.g. https://www.youronlinechoices.com).
16.37 DAILYMOTION
Our website uses plugins from the website dailymotion.com operated by DAILYMOTION. The operator of the site is the public limited company under French law (Société anonyme) DAILYMOTION, 140 boulevard Malesherbes – 75017 Paris, France.
When you visit one of our pages that has a DAILYMOTION plugin, a connection to the DAILYMOTION servers is established. It informs the DAILYMOTION server about which of our pages you visited.
If you are logged in to your DAILYMOTION account, you enable DAILYMOTION to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your DAILYMOTION account.
DAILYMOTION is used only on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR.
For more information about how DAILYMOTION handles user data, please refer to the privacy policy at: dailymotion.com/legal/privacy.
16.38 Use of Ad4m (ad4m.at)
Our website uses Ad4m, a service for displaying and optimising online advertising via the domain ad4m.at. In this case, cookies or similar technologies are set to collect pseudonymous information about user behaviour.
The data collected is used to create target groups, personalise advertising and rate and optimise advertising campaigns. Users are not identified directly; the data is processed on a pseudonymous basis.
You can object to the use of interest-based advertising at any time using industry-standard opt-out options (e.g. https://www.youronlinechoices.com).
16.39 d.vinci/dvinci-easy.com
We use the services of d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany (d.vinci) for the recruitment of personnel on the basis of your consent in accordance with Article 6 Paragraph 1(a) GDPR on our website. d.vinci is responsible for hosting the recruiting system as well as servicing and maintenance in individual cases. All the personal data is stored or processed on our behalf exclusively within Germany on a certified server operated by our service provider. The agreement on processing data on our behalf that is required under data protection law has been concluded with d.vinci. For more information on how d.vinci processes data, please visit https://www.dvinci.de/en/datenschutz/.
16.40 Twiago
We use the services of Twiago for the purposes of personalised marketing (e.g. to display advertisements within other online offers on the basis of presumed user interests).
Service provider: twiago GmbH, Charlotte Str. 61, 51149 Cologne, Germany e-mail: info@twiago.com.
Website: https://www.twiago.com/
Privacy policy: http://www.twiago.com/datenschutz/ [available in German only]
Storage duration: 2 months
Opt-out: http://control.twiago.com/privacy.php?lang=1
17. Your rights as a data subject
17.1 Right to confirmation
You have the right to request confirmation from us as to whether your personal data is being processed.
17.2 Right to information (Article 15 GDPR)
You have the right to request information from us at any time, free of charge, regarding the personal data we have stored about you as well as to receive a copy of this information in accordance with the pertinent statutory provisions.
17.3 Right to rectification (Article 16 GDPR)
You have the right to request that we immediately rectify incorrect personal data relating to yourself. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
17.4 Erasure (Article 17 GDPR)
You have the right to request that the personal data relating to you be erased immediately if one of the reasons stipulated by law applies and if processing or storage is not necessary.
17.5 Restriction of processing (Article 18 GDPR)
You have the right to request that we restrict the processing of your data if one of the legal requirements applies.
17.6 Data portability (Article 20 GDPR)
You have the right to obtain personal data relating to you which you provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance by us, to whom you provided your personal data, provided that the processing is based on the consent in accordance with Article 6 Paragraph 1(a) GDPR or Article 9 Paragraph 2(a) GDPR or on a contract in accordance with Article 6 Paragraph 1(b) GDPR, and the data is processed using automated procedures, unless this processing is necessary to perform an activity in the public interest or to exercise any official authority delegated to us.
Furthermore, when exercising your right to data portability in accordance with Article 20 Paragraph 1 GDPR, you also have the right to have your personal data sent directly from a data controller to another data controller, provided this is technically feasible and where this does not infringe upon the rights and freedoms of others.
17.7 Right to object (Article 21 GDPR)
You have the right to lodge an objection to the processing of personal data relating to you at any time for reasons relating to your particular situation where this is done on the basis of Article 6 Paragraph 1(e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests) GDPR.
This also applies to profiling as defined by Article 4 Paragraph 4 GDPR.
Should you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling and legitimate reasons for such processing that outweigh your interests, rights and freedoms, or where processing serves the assertion, exercise or defence of legal claims.
In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling where this is connected to this kind of direct marketing. Should you lodge an objection to us regarding the processing of your data for direct marketing purposes, we will no longer process your personal data for this purpose.
In addition, you have the right to lodge an objection for reasons relating to your particular situation to our processing of your personal data for scientific or historical research purposes or statistical purposes in accordance with Article 89 Paragraph 1 GDPR, unless this kind of processing is necessary to fulfil a duty in the public interest.
Directive 2002/58/EC notwithstanding, you are free to exercise your right to object using automated procedures in connection with the use of information society services where technical specifications are used.
17.8 Revoking your consent regarding data protection
You have the right to revoke any consent to the processing of personal data at any time with future effect.
17.9 Lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a competent supervisory authority responsible for data protection regarding our processing of personal data.
18. Routine storage, erasure and blocking of personal data
We process and store your personal data only for the period necessary to achieve the purpose of storage or as provided for by the statutory provisions to which our company is subject.
If the purpose of storage is no longer fulfilled or if a statutory retention period expires, your personal data will be routinely blocked or erased in accordance with the pertinent statutory provisions.
19. Duration of storage of personal data
The criterion for the duration of storage of personal data is the statutory retention period applicable in each case. Once the retention period has lapsed, the data in question is routinely erased, provided it is no longer needed for contractual performance or for entering into a contract.
20. Version and amendments to this Privacy Policy
This Privacy Policy is currently valid and was last updated in November 2025.
It may be necessary for us to amend this Privacy Policy in the process of further developing our website and the services we offer through our website or due to changes in legal or regulatory requirements. You can view and print this Privacy Notice, as amended from time to time, on our website "https://www.bugatti-fashion.com/de/rechtliches/datenschutz/" at any time.
This Privacy Notice was drafted with support from audatis MANAGER data protection software.



