Privacy Policy
1) Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data is any information by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is R&G Faserverbundwerkstoffe GmbH, Im Meißel 7, 71111 Waldenbuch, Germany, Tel.: +49 7157 530460, Fax: +49 7157 530470, E-mail: info@r-g.de. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 The controller has appointed a Data Protection Officer, who can be contacted as follows: "ELECTRONIC IMAGE CONSULTING, Jens Eilers, Bredkamp 64a, 22589 Hamburg, Germany, +49 (0)40 – 87 97 05 37, datenschutz{at}r-g.de"
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the web server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data transferred in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.
3) Hosting & Content Delivery Network
3.1 For the hosting of our website and the display of page content, we use a provider that performs its services itself or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
3.2 Cloudinary
We use a Content Delivery Network provided by the following company: Cloudinary Ltd., 3400 Central Expressway, Suite 110, Santa Clara, CA 95051, USA.
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly through a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on the European Commission's Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.
If personal data is also processed through individual cookies used by us, the processing is carried out either in accordance with Art. 6 (1) lit. b GDPR for the performance of a contract, in accordance with Art. 6 (1) lit. a GDPR if consent has been given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the website visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for specific cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.
5) Contacting Us
When contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that no statutory retention obligations prevent deletion.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide such data to us when opening a customer account. The data required for account registration can be found in the input form of the respective registration form on our website.
Your customer account can be deleted at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in retaining the data.
7) Use of Customer Data for Direct Marketing
Rapidmail
Our e-mail newsletters are sent via the following provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provide when registering for the newsletter to this provider in accordance with Art. 6 (1) lit. f GDPR so that it can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) lit. a GDPR, the provider also performs a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels embedded in the e-mails sent. These can measure open rates and specific interactions with newsletter content. Device information (e.g. access time, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other data sets.
You may revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
8) Data Processing for Order Processing
8.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided during the order process in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact data is used strictly for the purpose of providing information about updates owed by us and is processed only to the extent necessary for the respective notification.
For the processing of your order, we also cooperate with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 Use of Payment Service Providers (Payment Services)
- Amazon Pay
One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.
If you select a payment method offered by the provider that requires advance payment by you (such as credit card payment), the payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information regarding the contents of your order will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data is transferred exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Apple Pay
If you choose the "Apple Pay" payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored with "Apple Pay". Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, it is therefore necessary to enter a code previously defined by you and verify it using your device's "Face ID" or "Touch ID" function.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for processing the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.
Where personal data is processed during the transmissions described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
Further information about data protection with Apple Pay can be found at the following website: https://support.apple.com
- PayPal Checkout
This website uses PayPal Checkout, an online payment system provided by PayPal that consists of PayPal's own payment methods and local payment methods offered by third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we transfer your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") as part of payment processing. The transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, and – where offered – "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check concerning the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, may be included in the calculation of score values. You may object to this processing of your data at any time by contacting PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for contractual payment processing.
If the PayPal payment method "Purchase on Account" is available and selected, your payment data is first transmitted to PayPal for payment preparation, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany ("Ratepay"), for payment processing. The legal basis in each case is Art. 6 (1) lit. b GDPR. In this case, Ratepay performs an identity and credit check in its own name according to the principles described above and forwards your payment data to credit agencies based on its legitimate interest in determining creditworthiness pursuant to Art. 6 (1) lit. f GDPR. A list of the credit agencies used by Ratepay can be found here: https://www.ratepay.com
When using a payment method from a local third-party provider, your payment data is initially transmitted to PayPal for payment preparation in accordance with Art. 6 (1) lit. b GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider for payment processing in accordance with Art. 6 (1) lit. b GDPR:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
Further information on data protection can be found in PayPal's privacy policy: https://www.paypal.com
8.3 Sanctions List Screening
As part of establishing business relationships and processing orders, we reserve the right to compare the personal data provided by you with data contained in sanctions lists of the European Union and/or its individual member states and to decide, based on the results of this comparison, whether to establish the business relationship or execute the order.
This data processing is carried out in accordance with Art. 6 (1) lit. c GDPR based on our legal obligation to verify and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thereby prevent the provision of resources to such persons.
8.4 Electronic Cancellation Function for Distance Selling Contracts
Consumers who conclude contracts on this website that are subject to a statutory right of cancellation have the option to declare their cancellation via an electronic cancellation function in accordance with the applicable cancellation provisions.
When using the cancellation function, in addition to information required to identify the contract to be cancelled, further personal information such as the consumer's first and last name and e-mail address must be provided or confirmed.
The collection of this information and its transmission to us takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. The personal data provided is also used, on the basis of Art. 6 (1) lit. b GDPR, to confirm receipt of the cancellation declaration by e-mail. An additional legal basis for processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic cancellation function for paid distance contracts with consumers.
9) Web Analytics Services
9.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These cookies are stored on your device as small text files and collect certain information. This information also includes your IP address, which is shortened by Google by removing the last digits in order to exclude direct personal identification.
The information is transmitted to Google's servers and further processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The shortened IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data. The data collected through Google Analytics 4 is stored for a period of two months and then deleted.
All processing activities described above, in particular the setting of cookies on the device used, only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic Characteristics
Google Analytics 4 uses the special "Demographics" feature and can generate statistics providing information about the age, gender, and interests of website visitors. This is achieved through the analysis of advertising data and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1) lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistical information. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" feature in your Google Account settings. Follow the instructions on this page: https://support.google.com
Further information on Google Signals can be found here: https://support.google.com
User IDs
As an extension of Google Analytics 4, the "User IDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 (1) lit. a GDPR, created an account on this website, and log into this account on different devices, your activities, including conversions, can be analyzed across devices.
If you choose a payment method offered by the provider that requires advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about the content of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will only be disclosed for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Apple Pay
If you choose the payment method “Apple Pay” provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function of your device running iOS, watchOS, or macOS by charging a payment card stored in “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must therefore enter a code previously defined by you and verify it using your device’s “Face ID” or “Touch ID” function.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for payment execution. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.
Where personal data is processed as part of the transmissions described above, such processing is carried out solely for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Through anonymization, any personal reference is completely excluded. Apple uses anonymized data to improve “Apple Pay” and other Apple products and services.
If you use Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on a Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information about data protection with Apple Pay can be found at the following website: https://support.apple.com
- PayPal Checkout
This website uses PayPal Checkout, an online payment system provided by PayPal consisting of PayPal’s own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – “Pay Later” via PayPal, we transmit your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. The transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to perform a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – “Pay Later” via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data may be included in the calculation of score values, among other factors. You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
If the PayPal payment method “Purchase on Account” is available and selected, your payment data is first transmitted to PayPal to prepare the payment. PayPal then forwards the data to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany (“Ratepay”) for payment processing. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, Ratepay performs an identity and creditworthiness check in its own name according to the principles described above and transfers your payment data to credit agencies based on its legitimate interest in determining creditworthiness pursuant to Art. 6(1)(f) GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com
If you use a local third-party payment method, your payment data is first transferred to PayPal for payment preparation in accordance with Art. 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal then transfers your payment data to the respective provider for payment processing in accordance with Art. 6(1)(b) GDPR:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
Further information on data protection can be found in PayPal’s privacy policy: https://www.paypal.com
8.3 Sanctions List Screening
As part of establishing business relationships and processing orders, we reserve the right to compare the personal data you provide with sanctions lists of the European Union and/or its individual member states and to decide, based on the results of this comparison, whether to enter into a business relationship or execute an order.
This data processing is carried out in accordance with Art. 6(1)(c) GDPR due to our legal obligation to verify and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thus prevent the provision of resources to such persons.
8.4 Electronic Withdrawal Function for Distance Selling Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal using an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn from, further personal information such as the consumer’s first and last name and email address must be provided or confirmed.
The collection of this information and its transmission to us is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. Based on Art. 6(1)(b) GDPR, the personal data provided is also used to confirm receipt of the withdrawal declaration by email. An additional legal basis for processing is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic withdrawal function for consumer distance selling contracts involving payment.
9) Web Analytics Services
9.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information includes your IP address, which Google truncates by removing the last digits to prevent direct personal identification.
The information is transmitted to Google servers and further processed there. Transfers to Google LLC in the United States are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You may revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic Characteristics
Google Analytics 4 uses the special “Demographic Characteristics” feature and can generate statistics regarding the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This enables target groups for marketing activities to be identified. However, the collected data cannot be assigned to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have activated personalized advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalized Advertising” function in your Google account settings. Follow the instructions on this page: https://support.google.com
Further information on Google Signals can be found here: https://support.google.com
User IDs
As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
10.5 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
For the use of Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose of this is to statistically record and evaluate certain predefined goals, such as purchases or leads, so that the orientation and content of our offers can be tailored more closely to user interests. The tags are never used for the personal identification of users.
All of the processing described above, in particular the setting of cookies for reading information from the end device used, is only carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.6 Reddit Tracking Pixel
This website uses conversion tracking technology from the following provider: Reddit Inc., 420 Taylor Street, San Francisco, CA 94102, USA
If you reached our website via an advertisement on the provider's domain, the success of the advertisement can be tracked with the help of cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, including possibly your IP address, is read via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, searches on the website, views of product pages). This enables the creation of statistics on user behavior on our website after redirection from an advertisement, which serve to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading information from the end device used, is only carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
11) Site functionalities
11.1 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest when the video is played, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to the site, your data is directly assigned to your account when you click a video. If you do not want your data to be associated with your account, you must log out before pressing the playback button.
All of the aforementioned processing, in particular the setting of cookies for reading information from the end device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11.2 Google Maps
This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive maps in order to visually present geographic information. Using this service shows you our location and makes any directions to us easier.
As soon as you access the subpages in which Google Maps is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles (even for non-logged-in users) and evaluates them.
The collection, storage, and evaluation are carried out pursuant to Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research, and/or the demand-oriented design of Google websites. You have a right to object to the creation of these user profiles, but you must contact Google to exercise it. If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you can also completely disable the Google Maps web service by turning off JavaScript in your browser. Google Maps, and thus the map display on this website, can then no longer be used.
Where legally required, we have obtained your consent for the above-described processing of your data pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above for submitting an objection.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google's privacy policy can be found here: https://business.safety.google
11.3 Google Translate
This website uses the translation service "Google Translate" by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via API integration. In order for the translation to be displayed automatically according to the local language you select, the browser you use connects to Google's servers. In doing so, certain browser information, including your IP address, is transmitted to Google.
Google may use so-called "cookies" to store language settings, i.e. small text files stored on your end device. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there.
In connection with the processing described above, transmission to Google LLC servers in the USA may also occur.
If cookies are set when using Google Translate, the above-described processing is only carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
If no cookies are set, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the user-friendly design of our website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google's privacy policy can be found here: https://business.safety.google
12) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications requiring consent. The “Cookie Consent Tool” is displayed to users when the page is accessed in the form of an interactive user interface, where consent for certain cookies and/or cookie-based applications can be granted by ticking boxes. By using the tool, all cookies/services requiring consent are loaded only if the respective user has granted the corresponding consent by ticking the boxes. This ensures that such cookies are set on the user's respective end device only if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly cookie consent management system and thus in the legally compliant design of our website.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of technically non-essential cookies dependent on the user's respective consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
13) Data subject rights
13.1 Applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), with reference to the legal basis cited for the respective conditions for exercising them:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Storage period for personal data
The duration for which personal data are stored is determined by the respective legal basis, the purpose of processing, and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data are processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods have expired, provided they are no longer required for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in continued storage.
When personal data are processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When personal data are processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
