Privacy policy

Personal data

Payment data

Contact data

Content data

Contractual data

Usage data

Meta-, communication, and procedural data

Log data

Recipients and clients

Prospects

Communication partners

Users

Business and contractual partners

Provision of contractual services and fulfillment of contractual obligations

Communication

Security measures

Office and organizational procedures

Organizational and administrative procedures

Feedback

Provision of our online offering and user-friendliness

Information technology infrastructure

Public relations

Business processes and business management procedures

Consent (Art. 6 Abs. 1 S. 1 lit. a) DSGVO) – The data subject has given consent for the processing of personal data concerning them for one or more specified purposes.

Contract performance and pre-contractual measures (Art. 6 Abs. 1 S. 1 lit. b) DSGVO) – Processing is necessary for the performance of a contract to which the data subject is party, or in order to take pre-contractual steps at the request of the data subject.

Legal obligation (Art. 6 Abs. 1 S. 1 lit. c) DSGVO) – Processing is necessary for compliance with a legal obligation to which the controller is subject.

Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless, having regard to the context, the data subject's rights and freedoms and legitimate expectations are overridden.

10 Jahre - Retention period for books and records, annual statements, inventories, location reports, opening balance sheets as well as the work instructions necessary for their understanding and other organizational documents (§ 147 Abs. 1 Nr. 1 i.V.m. Abs. 3 AO, § 14b Abs. 1 UStG, § 257 Abs. 1 Nr. 1 i.V.m. Abs. 4 HGB).

8 Jahre - Invoice records, such as invoices and cost receipts (§ 147 Abs. 1 Nr. 4 and 4a i.V.m. Satz 1 AO and § 257 Abs. 1 Nr. 4 i.V.m. Abs. 4 HGB).

6 Jahre - Other business documents: received commercial or trade letters, copies of sent commercial or trade letters, other documents that are significant for taxation purposes, e.g. hourly pay slips, accounting summaries, calculation sheets, price awards, but also payroll records, provided they are not already invoice records and cash registers (§ 147 Abs. 1 Nr. 2, 3, 5 i.V.m. Satz 3 AO, § 257 Abs. 1 Nr. 2 u. 3 i.V.m. Abs. 4 HGB).

3 Jahre - Data required to consider potential warranty and damages claims or similar contractual rights and obligations, as well as related inquiries, based on prior business experience and common industry practices, are stored for the duration of the regular legal limitation period of three years (§§ 195, 199 BGB).

Right to object: You have the right, for reasons arising from your particular situation, at any time to object to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If personal data concerning you are processed for direct marketing purposes, you have the right, at any time, to object to the processing of your personal data for such advertising purposes; this also applies to profiling insofar as it is linked to such direct marketing.

Right to withdraw consent: You have the right to withdraw consent at any time.

Right to information: You have the right to request confirmation as to whether personal data concerning you are being processed and to obtain information about these data, further information, and a copy of the data in accordance with statutory requirements.

Right to rectification: In accordance with statutory requirements, you have the right to request the completion of your personal data or the correction of inaccurate personal data concerning you.

Right to erasure and restriction of processing: In accordance with statutory requirements, you have the right to request that your personal data be erased without delay, or alternatively, in accordance with statutory requirements, to request a restriction on the processing of your data.

Right to data portability: You have the right, in accordance with statutory requirements, to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format, or to demand that such data be transmitted to another controller.

Right to lodge a complaint with supervisory authority: Notwithstanding any other administrative or judicial remedy available to you, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, workplace, or where the alleged infringement occurred, if you consider that the processing of personal data concerning you violates the provisions of the GDPR.

Types of processed data: Master data (e.g., full name, residential address, contact information, customer number, etc.); Payment data (e.g., bank connections, invoices, payment history); Contact data (e.g., postal and e-mail addresses or telephone numbers); Contract data (e.g., subject matter, duration, customer category); Usage data (e.g., page views and session duration, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta-, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).

Affected persons: Recipients of services and clients; Interested parties. Business and contractual partners.

Purposes of processing and legitimate interests: Provision of contractual services and fulfillment of contractual obligations; Security measures; Communication; Office and organizational procedures; Organizational and administrative procedures. Business processes and business management procedures.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO); Legal obligation (Art. 6 Abs. 1 S. 1 lit. c) DSGVO). Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Online Shop, Order Forms, E-Commerce, and Service Fulfillment: We process our customers' data to enable them to select, purchase, or order the chosen products, goods, and associated services, as well as their payment and provision, or delivery, or execution. Where necessary for the execution of an order, we engage service providers, in particular postal, freight forwarding, and courier companies, to carry out delivery, or execution on behalf of our customers. For the administration of payment processes, we utilize the services of banks and payment service providers. The required information is marked as such within the scope of the ordering or comparable acquisition process and includes the information needed for delivery, or provision and billing, as well as contact information to facilitate any necessary communication; Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO).

Types of processed data: Personal data (e.g., full name, residential address, contact information, customer number, etc.); Payment data (e.g., bank connections, invoices, payment history); Contractual data (e.g., subject matter of the contract, term, customer category); Usage data (e.g., page views and duration, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions); Meta-, communication- and procedural data (e.g., IP addresses, time stamps, identification numbers, involved persons). Contact data (e.g., postal and email addresses or telephone numbers).

Affected persons: Recipients of services and orderers; Business and contractual partners. Interested parties.

Purposes of processing and legitimate interests: Provision of contractual performance and fulfillment of contractual obligations. Business processes and business procedures.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO). Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Google Pay: Payment services (technical connection of online payment methods); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO); Website: https://pay.google.com/intl/de_de/about/. Privacy notice: https://policies.google.com/privacy.

Mastercard: Payment services (technical connection of online payment methods); Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO); Website: https://www.mastercard.de/de-de.html. Privacy notice: https://www.mastercard.de/de-de/datenschutz.html.

PayPal: Payment services (technical connection of online payment methods) (e.g., PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO); Website: https://www.paypal.com/de. Privacy notice: https://www.paypal.com/de/legalhub/paypal/privacyfull.

Visa: Payment services (technical connection of online payment methods); Service provider: Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, GB; Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO); Website: https://www.visa.de. Privacy notice: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Types of processed data: Usage data (e.g., page views and duration, click paths, usage intensity and frequency, used device types and operating systems, interactions with content and functions); Meta-, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons). Log data (e.g., log files concerning logins or the retrieval of data or access times.).

Affected persons: Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Provision of our online offering and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers etc.)). Security measures.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).

Provision of online offering on rented storage space: For the provision of our online offering, we use storage space, computing capacity, and software that we rent or otherwise obtain from a corresponding server provider (also referred to as "web hoster"); Legal basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).

Collection of access data and log files: Access to our online offering is logged in the form of so-called "server log files". Server log files may include the address and name of the retrieved web pages and files, date and time of retrieval, transferred data volumes, notification of successful retrieval, browser type along with version, the user's operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider. Server log files can be used for security purposes, e.g., to avoid server overload (especially in the event of malicious attacks, so-called DDoS attacks), and also to ensure the utilization of the servers and their stability; Legal basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO). Deletion of data: Log file information is stored for a maximum period of 30 days and then deleted or anonymized. Data whose further retention is required for evidentiary purposes are exempt from deletion until the respective incident is finally clarified.

netcup: Services in the field of provision of information technology infrastructure and associated services (e.g., storage space and/or computing capacity); Service provider: netcup GmbH, Daimlerstraße 25, D-76185 Karlsruhe, Germany; Legal basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO); Website: https://www.netcup.de/; Privacy policy: https://www.netcup.de/kontakt/datenschutzerklaerung.php. Data processing agreement: https://helpcenter.netcup.com/de/wiki/general/avv/.

Temporary Cookies (also: Session or session cookies): Temporary cookies are deleted at most when a user leaves an online offering and closes their device (e.g., browser or mobile application).

Permanent Cookies: Permanent cookies remain stored even after closing the device. For example, login status can be saved and preferred content displayed directly when the user revisits the website. Similarly, data collected via cookies may be used for traffic measurement. If we do not provide explicit indications about cookie type and duration to users (e.g., during consent request), they should assume they are permanent and may last up to two years.

Processed data types: Meta-, communication- and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).

Affected persons: Users (e.g., website visitors, users of online services).

Legal bases: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO). Consent (Art. 6 Abs. 1 S. 1 lit. a) DSGVO).

Processing of cookie data based on consent: We implement an opt‑in management solution where users' consent to use cookies or the procedures and providers mentioned in the opt‑in management solution are obtained. This procedure serves to collect, record, manage and withdraw consents, especially regarding cookie usage and comparable technologies that store, read and process information on users' devices. Within this procedure, user consents for cookie usage and associated processing of information, including specific processing and providers mentioned in the opt‑in management procedure, are obtained. Users also have the possibility to manage and withdraw their consents. Consent declarations are stored to avoid repeated queries and to provide proof of consent according to legal requirements. Storage occurs server‑side and/or via a cookie (so‑called Opt‑In‑Cookie) or comparable technologies to associate consent with a specific user or device. If no specific information about providers of opt‑in management services is provided, the following general notes apply: The storage duration of consents lasts up to two years. A pseudonymous user identifier is created together with the time of consent, details on the scope of consent (e.g., cookie categories and/or service providers) and information about browser, system and device used; Legal bases: Consent (Art. 6 Abs. 1 S. 1 lit. a) DSGVO).

Types of processed data: Identity data (e.g., full name, residential address, contact information, customer number, etc.); Contact data (e.g., postal and e-mail addresses or telephone numbers); Content data (e.g., textual or image-based messages and posts as well as information concerning them, such as authorship details or creation time); Usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Log data (e.g., log files regarding logins or access to data or access times.).

Affected persons: Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Provision of contractual performance and fulfillment of contractual obligations; Security measures; Organizational and administrative procedures. Provision of our online offering and user-friendliness.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion". Deletion upon termination.

Legal bases: Contractual performance and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO). Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Deletion of data upon termination: If a user has terminated their user account, their data will be deleted with regard to the user account, subject to any statutory permission, obligation or consent of the user; Legal bases: Contractual performance and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO).

No retention obligation for data: It is up to the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all data stored by the user during the duration of the contract; Legal bases: Contractual performance and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO).

Types of data processed: Personal data (e.g., full name, residential address, contact information, customer number, etc.). Usage data (e.g., page views and duration, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions).

Affected persons: Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Provision of contractual performance and fulfillment of contractual obligations; security measures. Provision of our online offering and user-friendliness.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal bases: Fulfillment of contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO). Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Protection of own data: Users decide themselves which data they disclose about themselves within our online offering. For example, when users provide information about their person or participate in conversations. We request that users protect their data and publish personal data only with care and only to the extent necessary. In particular, we request that users pay special attention to protecting their access credentials and must use secure passwords (i.e., primarily as long and random character combinations); Legal bases: Fulfillment of contract and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO).

Types of Data Processed: Contact details (e.g., postal and email addresses or telephone numbers); Content data (e.g., textual or image-based messages and posts as well as information concerning them, such as authorship or creation date). Meta-, communication-, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).

Affected Persons: Communication partners.

Purposes of Processing and Legitimate Interests: Communication; Organizational and administrative procedures; Feedback (e.g., collecting feedback via online form). Provision of our online offering and user-friendliness.

Retention and Deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal Basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO). Contract performance and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO).

Contact Form: When contacting us via our contact form, by email, or other communication channels, we process the personal data transmitted to us for responding to and handling the respective matter. This typically includes details such as name, contact information, and any further information communicated to us that is necessary for appropriate handling. We use these data solely for the stated purpose of contacting and communicating; Legal Basis: Contract performance and pre-contractual inquiries (Art. 6 Abs. 1 S. 1 lit. b) DSGVO), Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Types of processed data: Content data (e.g., textual or image-based messages and posts, as well as information concerning them, such as authorship details or creation time); Usage data (e.g., page views and duration, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta-, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).

Affected persons: Communication partners. Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Provision of contractual services and fulfillment of contractual obligations. Office and organizational procedures.

Retention and deletion: Deletion in accordance with the information provided in the section "General Information on Data Storage and Deletion".

Legal basis: Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).