Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any personal information. Each time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, which is then stored in log files (server log files). This stored data includes: z.B. the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. The EU Commission has also issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

contact

Responsible

Please contact us if you wish. The data controller is:
Andreas Struppler
Blumenstrasse 3
85540 Haar, Germany
Tel.: 089158922410
E-mail: office@roomours.de

Customer initiates contact via email

If you contact us proactively via email, we collect your personal data (name, email address, message text) only to the extent that you provide it. This data processing serves the purpose of processing and responding to your inquiry.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., providing advice on purchase interest, preparing an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

If you contact us for other reasons, this data processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

We will only use your email address to process your request. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Data collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data is processed for the purpose of contacting you.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g.If the processing of your personal data is for the purpose of providing advice on purchase interest, preparing offers, or relating to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

If you contact us for other reasons, this data processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

We will only use your email address to process your request. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when images are sent via email

You have the option of sending us pictures via email in connection with ordering a personalized product.

By submitting your images, we may collect your personal data (image of an identifiable person) only to the extent you provide it. This data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). This processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data will not be shared with third parties. We will only use the image you submit for the purpose of providing our services. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Using WeTransfer

We use the WeTransfer service. B.V. (Willem Fenengastraat 19, 1096 BL Amsterdam, Netherlands; “WeTransfer”), to send files up to 2 GB in size upon your request.

This service is used to transfer large files in high quality. For this purpose, we share your email address and the file to be transferred with WeTransfer. WeTransfer generates a download link, which is sent to you and us via email. The data is encrypted during transmission and storage by WeTransfer and can only be accessed via the download link.

Your personal data may be transferred to WeTransfer servers in the USA and temporarily stored there (partially unencrypted). The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). WeTransfer is not TADPF certified. This data transfer is based on standard contractual clauses as suitable safeguards for the protection of personal data, which can be viewed at: Standard Contract Clauses.

The processing is based on Art. 6 para. 1 lit. a GDPR with your consent, provided you have expressly agreed to the use of WeTransfer.

You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

Further information on data protection when using WeTransfer can be found at: WeTransfer Privacy Policy.

Customer account & Orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there.The data processing serves the purpose of improving your shopping experience and simplifying order processing. This processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data during orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for entering into a contract. Failure to provide this data will result in the contract not being concluded. This processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data will be shared with, for example, shipping companies, dropshipping and fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to the minimum necessary.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. The EU Commission has also issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

Advertising

Use of the email address for sending newsletters

We use your email address, independently of contract processing, exclusively for our own advertising purposes to send you newsletters, provided you have expressly consented to this. This processing is based on Article 6 Paragraph 1 Letter a of the GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of the email address for sending direct marketing.

We use your email address, which we obtained in connection with the sale of goods or services, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it will result in the contract not being concluded. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. Our contact details for exercising your right to object can be found in the legal notice. You can also use the unsubscribe link provided in the advertising email. No costs other than standard transmission fees will be incurred.

Shipping service provider & Inventory management

Sharing of the email address with shipping companies to inform about the shipping status

We will share your email address with the shipping company as part of the order processing, provided you have expressly consented to this during the ordering process. This sharing is for the purpose of informing you about the shipping status via email. This processing is based on Article 6(1)(a) of the GDPR with your consent. You can withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing based on consent before its withdrawal.

Use of an external merchandise management system

We use an enterprise resource planning (ERP) system for order processing. For this purpose, your personal data collected during the ordering process will be transmitted to weclapp GmbH, Friedrich-Ebert-Straße 28, 97318 Kitzingen.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.

Payment service provider

Using PayPal

We use the PayPal payment service from PayPal (Europe) S.à on our website.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it here: PayPal Privacy Statement

Using PayPal Plus

We use the PayPal Plus payment service from PayPal (Europe) S.à on our website.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) GDPR.

Using PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à on our website.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling you to offer payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect data when you access the website (z.B. Your IP address, device type, operating system, browser type, and device location are collected, stored, and analyzed. Cookies may also be used for this purpose. These cookies enable the recognition of your browser.

Your personal data is processed on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

Using PayPal Checkout

We use the PayPal Check-Out payment service from PayPal (Europe) S.à on our website.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) GDPR.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal

For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values ​​(score values) calculated using scientifically recognized mathematical-statistical methods, which may incorporate address data, among other factors. Your legitimate interests are protected in accordance with legal regulations. The data processing serves the purpose of credit assessment for initiating a contract. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when PayPal provides services in advance. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(f) GDPR by notifying PayPal. Providing this data is necessary for concluding the contract with your chosen payment method. Failure to provide this data will result in the contract not being able to be concluded with your chosen payment method.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) GDPR. To process this payment method, PayPal may then forward the data to the respective provider. This processing is also based on Article 6(1)(b) GDPR.

• Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
• giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on account via PayPal

When paying via invoice, the data required for payment processing is initially transmitted to PayPal. To process this payment, PayPal then transmits the data to Ratepay GmbH (Franklinstrasse 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method.This processing is based on Article 6(1)(b) GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) with credit agencies, following the procedure described above. The data processing serves the purpose of credit assessment for initiating a contract. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides services in advance.

Using the payment service provider Stripe

We use the payment service Stripe, provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on our website. The data processing serves the purpose of offering you the option of payment via this service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to fully utilize all the functions of this website.

The links below provide information on how to manage cookies in the most common browsers (u.a. (also deactivate) can:

• Chrome
• Microsoft Edge
• Mozilla Firefox
• safari

Technically necessary cookies

Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies to make our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to a different page and to offer you services. Some features of our website cannot be offered without the use of cookies. For these features, it is necessary that the browser is recognized even after a page change.

The use of cookies or similar technologies is based on Section 25 Paragraph 2 of the German Telemedia Act (TDDG). The processing of your personal data is based on Article 6 Paragraph 1 Letter f of the GDPR, due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

Using Consent Manager

We use the consent management tool Consentmanager from Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website.This tool allows you to grant consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw previously granted consent. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. The following information, among other things, may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you are using, anonymized IP address, and opt-in and opt-out data. This data will not be shared with any other third parties. Data processing is carried out to fulfill a legal obligation based on Article 6 Paragraph 1 Letter c GDPR. Further information on data protection at Consentmanager can be found at: Consent manager data protection.

Using the Shopify Consent Tool (Shopify Privacy) & Compliance

We use the consent tool “Shopify Privacy” on our website. & This tool is a compliance tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Shopify is an affiliate of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). It allows you to grant consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw previously granted consent. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify. Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada and the USA. Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not TADPF certified. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses. Data processing is carried out to fulfill a legal obligation based on Article 6(1)(c) GDPR. Further information on data protection at Shopify can be found here: Shopify Privacy Policy and information about the cookies used can be found at: Shopify Cookies.

analysis & Ad tracking

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator.

This can u.a. The following information will be collected: IP address, date and time of page access, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, and purchase activity.Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

Your IP address is shortened by us on our own servers beforehand. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, browser storage, and tracking pixels to analyze your website usage. The use of cookies or similar technologies requires your consent and is based on Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR.

Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Using Hotjar

We use the analytics tool from Hotjar Ltd. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”) on our website. The data processing serves the purpose of tailoring, optimizing, and analyzing our website to user needs.

The tool randomly records the movements of website visitors. This creates a log of mouse movements, scrolling behavior, time spent on the website, and clicks (a so-called heatmap).

For this purpose, Hotjar uses u.a. Cookies are used. This allows u.a. The following information is collected: IP address (in anonymized form), information about the device you are using (screen size, device type, unique device identifier), information about the browser you are using, location data (country only), preferred language for displaying the website, and operating system used. Detailed information about the cookies used, their function, and storage duration can be found here: Hotjar Cookies.

User profiles are created from this data under a pseudonym. The data is not used to personally identify website visitors and is not combined with the personal data of the pseudonym holder. Hotjar is contractually prohibited from selling the collected data to other third parties.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. Data transfer takes place u.a. Based on appropriate protective measures. Hotjar will provide further information on the measures taken upon request.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Using SalesViewer

We use the web analytics service “SalesViewer” from SalesViewer® GmbH (Bongardstraße 29, 44787 Bochum; “SalesViewer”) on our website as part of order processing.

The data collection and processing serves the purpose of optimizing this website as well as for marketing and advertising purposes.For this purpose, SalesViewer technology will use a JavaScript-based tracking code to collect and use company-related information; this includes u.a. The following data is collected: company name, origin and industry of the visiting company, keyword, visitor behavior (e.g., click path, date and time of the page view and its duration). The so-called hashing function is used, so the data cannot be traced back to individual users. Usage profiles can be created from the data collected in this way using pseudonyms. However, personal identification of users is not possible. SalesViewer does not use cookies. Your data will not be shared with any other third parties.

Your personal data is processed on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in identifying our customers and targeting them with interest-based advertising. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation. To prevent data collection and storage by SalesViewer across all devices, you can [link to SalesViewer settings]. SalesViewer Opt-out Set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must perform the opt-out on all systems and devices you use for it to be fully effective. If you delete the opt-out cookie, requests will again be sent to SalesViewer.

Further information on terms of use and data protection can be found at: SalesViewer Privacy Policy.

Using Shopify statistics

We use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a data processing agreement. Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics. u.a. The following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the web pages or products visited, the referrer URL (the website from which you accessed our website), and information about how you interact with the website are also collected.

This is achieved using technologies such as cookies, web beacons, tags and pixels (electronic files for collecting information about how you navigate the website).

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. The EU Commission has also issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR.You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Using Microsoft Clarity

We use the analytics tool “Microsoft Clarity” from Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; “Microsoft”) on our website. Microsoft is a company affiliated with Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA). The data processing serves the purpose of tailoring, optimizing, and analyzing our website to user needs. The tool randomly records the movements of website visitors. This creates a log of mouse movements, scrolling behavior, time spent on the website, and clicks (a so-called heatmap).

Cookies or similar technologies are used for this purpose. u.a. The following information will be collected: IP address, time of access, click path, information about the device you are using (device type, screen size and resolution, unique device identifier, operating system), information about the browser you are using (browser type and browser version), location data, preferred language for displaying the website, visited subpages, time spent, viewed content, requested website or file.

User profiles are created from this data under a pseudonym. The data is not used to personally identify website visitors and is not combined with the personal data of the pseudonym holder. Microsoft is contractually prohibited from selling the collected data to any other third parties.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website. Meta and we are jointly responsible for the collection of your data and its transfer to Meta when the service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines the respective responsibilities. The agreement is available at [link to agreement]. Facebook Business Tools accessible. We are then specifically responsible for fulfilling the information obligations pursuant to Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, insofar as a personal data breach affects our obligations under the joint controllership agreement. Meta is responsible for enabling the data subject rights pursuant to Articles 15-20 of the GDPR, complying with the security requirements of Article 32 of the GDPR with regard to the security of the service, and fulfilling the obligations under Articles 33 and 34 of the GDPR.Articles 33 and 34 of the GDPR, insofar as a breach of the protection of personal data affects Meta's obligations under the joint processing agreement.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.

Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Using Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).

When you click on an ad served by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited lifespan, do not contain any personally identifiable information, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of different Ads customers.

The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users. We use the advanced consent mode. In this mode, even if consent is not given, user data is transmitted to Google in the form of "pings." These pings can u.a. The following information is included: IP address to deduce the IP country (the IP address is not logged), date and time of the page request, URL of the visited pages, user agent, referrer URL (website from which our website was accessed), or information about triggering website events such as z.B. a conversion. Based on this information, Google models user data to perform a comprehensive usage analysis despite the refusal of consent.

Your data may be transferred to Google LLC servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Using Google AdSense

We use the AdSense feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting advertising space on the website and using this space to target website visitors with interest-based advertising. This feature displays personalized, interest-based advertisements from the Google Display Network to visitors of the provider's website. Google uses cookies that enable an analysis of your website usage. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles. Google may transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. Google will under no circumstances associate your IP address with other Google data.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Use of the remarketing or "similar audiences" function of Google Inc.

We use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This function is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies record website visits and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to reflect previously viewed product and information areas.

Your data may be transferred to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Further information about Google Remarketing and the associated privacy policy can be found at: Google Remarketing.

Using the LinkedIn Insight Tag

We use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; "LinkedIn") on our website for conversion tracking (visit action evaluation) and retargeting (displaying personalized advertisements). The LinkedIn Insight Tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and allows the collection of the following data for this cookie: metadata such as IP address, timestamp, and page events (e.g., page views). These cookies have a limited lifespan. If you visit certain pages of our website and the cookie has not yet expired, LinkedIn and we can recognize that you clicked on the ad and were redirected to this page.

The LinkedIn Insight Tag also allows LinkedIn to collect data on visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent), and timestamps. This data is transmitted to LinkedIn, encrypted, IP addresses are shortened, and the direct IDs of LinkedIn members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted by LinkedIn within 90 days.

LinkedIn does not share any personally identifiable information with us, but only provides aggregated reports on website audience and ad performance. LinkedIn members can control the use of their personal data for advertising purposes in their account settings.

The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn is certified under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

Further information about cookies and LinkedIn's privacy policy can be found at: LinkedIn Cookie Policy and LinkedIn Privacy Policy.

Using the Pinterest tag

We use the Pinterest tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website. This tag allows us to target website visitors with interest-based advertising on the Pinterest social network. To achieve this, the Pinterest conversion tag has been implemented on our website. This tag establishes a direct connection to Pinterest's servers when you visit our website. This transmits information to Pinterest's servers about which of our pages you have visited. If you are logged into the social network, Pinterest associates this information with your personal Pinterest user account.When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.

When you access our website via a pin on the social network Pinterest, a conversion tracking cookie is stored on your computer. These cookies have a limited lifespan, do not contain any personal data, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information collected using the conversion cookie is used to generate conversion statistics and thus optimize our website. u.a. The following information is processed: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (z.B. Category or product pages), search queries on our website, your shopping cart contents, completed transactions.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not TADPF certified. Data transfer takes place u.a. based on standard contractual clauses as suitable safeguards for the protection of personal data, available at: Standard Contract Clauses.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

For more information about how Pinterest collects and uses data, your related rights, and options for protecting your privacy, please see Pinterest's privacy policy at: Pinterest Privacy Policy.

Plug-ins and other

Using Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript and HTML tags, which are used to implement tracking and analytics tools. The data processing serves the purpose of tailoring and optimizing our website to user needs. Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of other tags that may collect and process personal data.

You can find more information about terms of use and data protection here. here.

Use of social plug-ins

We use social network plugins on our website. The integration of social plugins and the associated data processing serve the purpose of optimizing advertising for our products.

When social plugins are integrated, a connection is established between your computer and the servers of the social network provider. The plugin is then displayed on the page by sending a message to your browser, provided you have explicitly consented to this. In this process, both your IP address and information about which of our pages you have visited are transmitted to the provider's servers.This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or logged in. If you are simultaneously connected to one or more of your social network accounts, the collected information can also be associated with your corresponding profiles. When using the plug-in functions (z.B. By clicking the button, this information will also be associated with your user account. You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TMG). i.V.m. Article 6 paragraph 1 letter a GDPR. Your personal data is processed with your consent on the basis of Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

The social networks listed below are integrated into our website via social plugins. Further information on the scope and purpose of data collection and use, as well as your related rights and options for protecting your privacy, can be found in the linked privacy policies of the providers.

• Facebook Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Instagram Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland)
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
• Pinterest Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)

Integration of the Händlerbund member logo

The Händlerbund member logo is displayed on our website (Handelsbund). e.V. , Kohlgartenstraße 11-13, 04315 Leipzig). When you access our website, your browser automatically sends information to the Händlerbund server. e.V. Sent. This information is temporarily stored in a server log file for 7 days. The following information is collected automatically without your intervention and stored until its automated deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of the IT systems. This data is not stored together with other personal data.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Inclusion of the logo of the “FairCommerce” initiative

Our website features the logo of the “FairCommerce” initiative (Handelsbund). e.V. , Kohlgartenstraße 11-13, 04315 Leipzig). When you access our website, your browser automatically sends information to the Händlerbund server. e.V. sent.This information is temporarily stored in a server log file for 7 days. The following information is collected automatically without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of the IT systems. This data is not stored together with other personal data.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data subject rights and storage period

Storage duration

After complete contract fulfillment, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject

Provided the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

Furthermore, pursuant to Article 21 Paragraph 1 GDPR, you have the right to object to processing based on Article 6 Paragraph 1 f GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority

According to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-mail: poststelle@lda.bayern.de

Right to object

If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future. Following your objection, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If your personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Upon receipt of your objection, we will cease processing the data in question for direct marketing purposes.

Last updated: October 22, 2024