Privacy Policy - Diller Powerparts

Privacy Policy

The purpose of this privacy policy is to inform you and the public about the nature, scope, and purpose of the personal data we collect, use, and process, and to inform you about your rights.

1. Definitions

Our privacy policy is based on the terms of the General Data Protection Regulation (GDPR). When we refer to the following terms in our privacy policy, we mean the following:

Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as „data subject“). An „identifiable“ person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Data Subject

A person is „affected“ if their personal data is processed by the controller.

Processing

„Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

Profiling

„Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate, analyze, or predict certain personal aspects relating to a natural person (in particular concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements).

Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or Data Controller

Controller or data controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor

Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Recipient

Recipient is a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third Party

Third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and Address of the Controller

Diller Powerparts GmbH, represented by the managing director Mr. Patrick Diller,

Willmarser Straße 74,

98617 Rhönblick

Phone: +49 (0) 36943 24083

Email: info@diller-powerparts.de

3. Data Collection and Legal Basis for Processing

In the context of an order, the legal basis for processing personal data is the processing of the order and the fulfillment of the contract to which the data subject is a party. The processing is based on Art. 6 I lit. b GDPR.

When contacting us independently of an order (e.g., via email or the contact form), the legal basis is our legitimate interest in processing your request. The processing is based on Art. 6 I lit. f GDPR.

In the case of direct marketing, the legal basis is our legitimate interest. The processing is based on Art. 6 I lit. f GDPR.

In the context of processing personal data based on explicit consent, the legal basis for processing personal data is consent according to Art. 6 I lit. a GDPR.

In the context of processing personal data due to contractual obligations regarding updates for goods with digital elements or for digital products, the legal basis is our legal information obligation according to Art. 6 para. 1 lit. c GDPR.

a) Collection of general data and information

When you access our website, general information is automatically collected. This information (so-called „server log files“) includes, for example, the type of internet browser, the operating system used, the domain name of your internet service provider, and similar. This information does not allow us to draw conclusions about your person. This information is technically necessary to correctly deliver content from websites requested by you and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us to optimize our internet presence and the underlying technology.The following information is collected and stored when you access our website:

IP address of your PC or your internet-enabled device
Access date
Name and URL of the retrieved file,
Referrer URL
Browser / operating system / access provider

The data collection and storage serves the following purposes:

Website connection,
Technical use of the website,
System security
Administration.

Data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string „https://“ and the lock symbol in your browser line.

b) Registration and ordering on our website

If you register on our website or create a user account, personal data will also be collected from you. We point out that registration may offer further access to the content of our websites, but it is not a mandatory prerequisite for using our website. Which personal data is transmitted to the controller results from the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for their own purposes. The controller may arrange for the transfer to one or more processors, for example a parcel service provider for postal delivery to you, who also uses the personal data exclusively for internal use attributable to the controller.

During a registration process on our website, the data you enter during registration will be stored.

The purpose of data collection and storage is:

Customer identification
Processing and handling of the order for correspondence with you
Invoicing
for the settlement of any existing liability claims, as well as the assertion of any claims against you
technical administration of the website
Administration

Your consent will be obtained from you during the ordering process before this data is processed.

Data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR.

c) Newsletter

If you voluntarily subscribe to our newsletter (regular promotional information email with offers or other information from our company), the data you provide will be used exclusively for this purpose and will not be passed on to third parties.

This also includes information relevant to the service or registration. The validity of the email address is checked using the so-called „double opt-in“ procedure. For this purpose, the newsletter order is checked by sending a confirmation email and the response. No further data is collected.

Unsubscribing from the newsletter (withdrawal of consent) is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. You will not incur any additional costs for the objection beyond the regular transmission costs (e.g. costs for a phone call). Data processing based on your consent is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

d) Sending the newsletter

Existing customers

We reserve the right to regularly send you offers for similar goods or services from our range that you have already purchased, by email. For this, according to § 7 Para. 3 UWG, we do not need to obtain separate consent from you. Data processing in this respect is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs at the basic rates. After receipt of your objection, your email address will be removed from the mailing list.

Contact option via the website

If you send us inquiries via the contact form or by email, your details from the inquiry form or email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and/or contacting the data subject. We do not pass on this data to third parties. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Data processing based on your consent is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. The personal data collected for the use of the contact form will be automatically deleted after your request has been dealt with. You have the right to withdraw your consent to data processing at any time.

e) Comment function in the blog on the website

When comments are made on our site, the chosen username is also recorded and stored in addition to this information, so that illegal content can also be pursued to our relief.

f) Electronic withdrawal of distance contracts

Consumers have the option to declare their withdrawal from distance contracts for which a statutory right of withdrawal exists via the electronic withdrawal function provided on our website.

When using this function, the personal data required for processing the withdrawal is collected and processed. This includes, in particular, information for identifying the contract concerned as well as the contact details you have provided or already stored, such as your first and last name and your email address.

The processing of this data is for the purpose of receiving, assigning and processing your declaration of withdrawal as well as confirming receipt of the withdrawal on a permanent data carrier. The legal basis for processing is Art. 6 Para. 1 lit. b GDPR, as the processing is necessary for the performance of pre-contractual measures or the execution of the contractual relationship and the resulting rights and obligations.

Insofar as the processing is carried out to fulfill legal obligations in connection with the provision of an electronic withdrawal function and the confirmation of receipt of the declaration of withdrawal, an additional legal basis is Art. 6 Para. 1 lit. c GDPR.

The collected data will be used exclusively for processing your withdrawal and will not be processed for other purposes, unless there is a legal obligation or other data protection law permission for further processing.

4. Storage period / Collection and storage of personal data, as well as the nature and purpose of its use / Disclosure of data

The purpose of using and transmitting personal data is for customer identification, contract fulfillment, order processing, customer correspondence, invoicing, direct marketing, and for handling any existing liability claims or asserting any claims against you.

In principle, your stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

We store the personal data collected and transmitted to us for the processing of your order until the expiry of the statutory retention period. Afterwards, your data will be deleted by us, unless we are obliged to store it for a longer period due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or statutory information obligations according to Article 6 (1) sentence 1 lit. c GDPR, or you have consented to further storage according to Art. 6 (1) sentence 1 lit. a GDPR.

In the event of contact regardless of an order (e.g. via e-mail or the contact form), we store your data until the processing of your request and the associated matter have been completed and there are no statutory retention obligations to the contrary.

In the context of processing personal data based on an explicit consent, we store this data until the consent is revoked by the data subject.

In the context of processing personal data based on Art. 6 (1) lit. f GDPR, we store this data until the right to object according to Art. 21 (1) GDPR is exercised by the data subject.

In the context of processing personal data based on Art. 6 (1) lit. f GDPR for the purpose of direct marketing, we store this data until the right to object according to Art. 21 (1) GDPR is exercised by the data subject.

If we have to offer you updates for goods with digital elements or for digital products due to contractual obligations, we will use the data you provided during the order to inform you about updates (via e-mail or post).

Disclosure of data

Your personal data will only be passed on by us to third parties, namely to service partners involved in the contract processing, such as the logistics company commissioned with the delivery and the credit institution commissioned with payment matters. In cases where your personal data is passed on to third parties, the scope of the transmitted data is always limited to the necessary minimum.

Your personal data will not be transferred to third parties for purposes other than those mentioned below.

We only pass on your personal data to third parties if:

you have given your express consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR,
the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation for the disclosure in accordance with Art. 6 (1) sentence 1 lit. c GDPR, as well as
this is legally permissible and, in accordance with Art. 6 (1) sentence 1 lit. b GDPR, is necessary for the processing of contractual relationships with you.

5. Obligation to provide – possible consequences of non-provision

The provision of personal data is partly legally required (tax law) or can result from contractual regulations (transparency of the contractual partner). Non-provision of personal data would prevent the conclusion of a contract and therefore does not take place. Any information about the legally or contractually required provision of personal data will be provided by the controller.

6. Existence of automated decision-making

We do not use automated decision-making or profiling.

7. Routine deletion and blocking of personal data

When the storage period, which is explained in more detail under 4. above, has expired, the personal data will be routinely deleted.

8. Rights of the data subjectAs a data subject, you have the following rights:

Art. 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
Art. 16 GDPR: You have the right to request the rectification of inaccurate or completion of your personal data stored by us;
Art. 17 GDPR: You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data, as far as the accuracy of the data is contested by you, the processing is unlawful, but you refuse their erasure and we no longer need the data, but you need them for the establishment, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller;
Art. 7 (3) GDPR: You have the right to withdraw your consent to data processing. This means that we may no longer continue the data processing based on this consent in the future;
Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority at your usual place of residence or workplace or our company headquarters about the data processing (right to complain).

8.1 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object.

9. Cookies

Usage, legal basis and purpose

In order to optimally design the functionality and technical presentation of our website and to continue optimizing it, we use so-called „cookies“. These are small text files that are placed or stored on your device. With the help of these „cookies“, data can be stored on your computer when you visit our website.

We also use cookies on our website that enable an analysis of users‘ surfing behavior.

When visiting our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of personal data used in this context is obtained. In this context, a reference to this privacy policy is also made.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes, if the user has given their consent, is Art. 6 (1) (a) GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. We need cookies for the following applications: adoption of language settings. The user data collected by technically necessary cookies are not used to create user profiles.

The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted from there to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, not all functions of the website may be fully usable.

10. Social Media

Data processing in social media

Our company is active on various social media. In the course of communication with users, user data may be processed outside the European Union, which may lead to risks due to difficulties in enforcing rights. Regarding US providers certified under the Privacy Shield, we point out that they commit to complying with EU data protection standards.

As a rule, user data is processed for advertising and market research purposes in order to create usage profiles from user behavior. The usage profiles can be used, for example, for targeted advertising. For these purposes, cookies are usually stored on the users‘ computers, in which the users‘ usage behavior and interests are stored.

Legal basis of processing:

The legal basis for the processing of users‘ personal data is our legitimate interest in effective user information and communication with users in accordance with Art. 6 (1) (f) GDPR. If users are asked by the respective platform providers for consent to the data processing described above, the legal basis for the processing is Art. 6 (1) (a), Art. 7 GDPR.

The respective provider has the fastest access to user data. They can take the most effective measures. The rights of the data subject can therefore be asserted most quickly directly with the provider. Otherwise, we are always at your side.

FacebookPart of our website is the integration of the so-called social plugin („Plugins“) of the social network Facebook, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). The plugins are marked with a Facebook logo or the addition „Social Plug-in from Facebook“ or „Facebook Social Plugin“. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted by your browser directly to a Meta Platforms Inc. server in the USA and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example, by clicking the „Like“ button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

https://de-de.facebook.com/about/privacy/ explains the privacy settings Facebook offers to protect the privacy of the data subject.

Instagram

Part of our website is the integration of the so-called social plugin („Plugins“) of Instagram, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The plugins are marked with an Instagram logo, for example, in the form of an „Instagram camera“. The plugins are marked with an Instagram logo, for example, in the form of an „Instagram camera“. An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted by your browser directly to a Meta Platforms server in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example, by clicking the „Instagram“ button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g., with the script blocker „NoScript“ (http://noscript.net/).

Further information and Instagram’s applicable data protection regulations can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

Twitter

Part of our website is the integration of the so-called social plugin („Plugins“) of the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA („Twitter“). The plugins are marked with a Twitter logo, for example, in the form of a blue „Twitter bird“. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through this integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Twitter or are not currently logged into Twitter. This information (including your IP address) is transmitted by your browser directly to a Twitter server in the USA and stored there. If you are logged into Twitter, Twitter can directly associate your visit to our website with your Twitter account. If you interact with the plugins, for example, by clicking the „Tweet“ button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there. For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your related rights and setting options for protecting your privacy, please refer to Twitter’s privacy policy: https://twitter.com/privacy If you do not want Twitter to directly associate the data collected via our website with your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g., with the script blocker „NoScript“ (http://noscript.net/).

Twitter’s applicable data protection regulations can be found at https://twitter.com/privacy?lang=de.

YouTube

Part of our website is the integration of YouTube. This is an internet video portal that allows video publishers to upload video clips for free and other users to view, rate, and comment on them, also for free. YouTube allows the publication of all types of videos, which means that complete film and television programs, as well as music videos, trailers, or user-created videos, can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

As soon as you visit pages of our website equipped with a YouTube plugin, a connection to the YouTube servers is established. In doing so, the YouTube server is informed which specific page of our website you have visited. If you are also logged into your YouTube account, you would enable YouTube to directly associate your surfing behavior with your personal profile. You can prevent this association by logging out of your account beforehand. Further information on the collection and use of your data by YouTube can be found in their privacy policy at www.youtube.comThe privacy policy published by YouTube provides information about the collection, processing, and use of personal data by YouTube and Google.

Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing functions is accessed, a connection to Xing servers is established. To our knowledge, no personal data is stored in this process. In particular, no IP addresses are stored or usage behavior evaluated.
Further information on data protection and the Xing Share button can be found in Xing’s privacy policy at https://www.xing.com/app/share?op=data_protection

LinkedIn

Our website may use social plugins („plugins“) of the social network „LinkedIn“, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plugins are marked with a LinkedIn logo or the addition „LinkedIn Social Plugin“. If you access a website of Messe Düsseldorf GmbH that contains such a plugin, a direct connection to LinkedIn’s servers is established by clicking the icon. The content of the plugin is transmitted directly from LinkedIn to your browser and integrated into the website by it. By integrating the plugins, LinkedIn receives the information that you have accessed the corresponding page of our website. If you are logged in to LinkedIn, LinkedIn can assign the visit to your LinkedIn account. If you interact with the plugins, for example, by leaving a comment, the corresponding information is transmitted directly from your browser to LinkedIn and stored there. For the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your related rights and options for protecting your privacy, please refer to http://www.linkedin.com/legal/privacy-policy. If you do not want LinkedIn to collect data about you via our website when using the plugin, you must log out of LinkedIn before visiting our website.

Tumblr

This offering uses the buttons of the Tumblr service. These buttons are offered by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, hilfe@tumblr.com. They are recognizable by the term „Tumblr“. With the help of the buttons, it is possible to share a post or page of this offering on Tumblr or to follow the provider on Tumblr.

When a user accesses a website of this internet presence that contains such a button, their browser establishes a direct connection with Tumblr’s servers. The content of the Tumblr buttons is transmitted directly from Tumblr to the user’s browser. The provider therefore has no influence on the scope of the data that Tumblr collects with the help of this plugin and informs users according to its knowledge. According to this, only the user’s IP address and the URL of the respective website are transmitted when the button is obtained, but not used for purposes other than displaying the button.
Further information on this can be found in Tumblr’s privacy policy at www.tumblr.com/policy/de/privacy.

Pinterest

Our website features the „Pin it“ button of the social network Pinterest, operated by Pinterest, Inc. – located at 808 Brannan St, San Francisco, CA 94103, USA. By using the „Pin it“ button, Pinterest receives information that you have visited one of our web pages. If you are logged into your Pinterest account at that time, Pinterest can also associate your visit with your Pinterest account. By clicking the „Pin it“ button, data is transmitted to Pinterest and stored on servers (in the USA). If you wish to prevent this, you would need to log out of your Pinterest account before clicking the „Pin it“ button. To protect your privacy, please refer to Pinterest’s privacy policy for further details on the collection, processing, and use of your data by Pinterest, as well as your legal rights and setting options: http://pinterest.com/about/privacy/</p

Meetup

We use the provider service meetup. A Meetup group is a local community that organizes Meetups where members meet in person, in real life, at a location. Meetup is operated by WeWork Companies Inc., 115 W 18th St., New York, NY 10011, USA. To protect your privacy, please refer to meetup’s privacy policy for further details on the collection, processing, and use of your data by meetup, as well as your legal rights and setting options: https://www.meetup.com/de-DE/privacy/

11. Online Marketing

Use of Google Maps

We use the function for embedding Google Maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website.
The function enables the visual display of geographical information and interactive maps.
When pages with embedded Google Maps are accessed, Google also collects, processes, and uses data from visitors to these pages. Further information on the collection and use of data by Google can be found in Google’s privacy policy at https://www.google.com/privacypolicy.html. There, in the privacy center, you also have the option to change your settings so that you can manage and protect your data processed by Google.
Your data may also be transferred to the USA. An adequacy decision by the European Commission is available for data transfers to the USA.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(f) of the GDPR.
To do this, you must disable JavaScript in your browser. However, we would like to point out that in this case, you may not be able to fully use all functions of this website, such as the interactive map display.
Use of Google reCAPTCHAWe use the reCAPTCHA service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“) on our website. The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCAPTCHA will not be merged with other data from Google. Your data may also be transmitted to the USA. An adequacy decision by the European Commission, the „Privacy Shield“, is available for data transfers to the USA. Google participates in the „Privacy Shield“ and has submitted to its requirements. By confirming the query, you consent to the processing of your data. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time, without affecting the legality of the processing carried out based on the consent until revocation.
Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/privacy/ads/

DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („DoubleClick“).

DoubleClick uses cookies to show users relevant ads, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Through a cookie ID, Google records which ads are shown in which browser and can thus prevent them from being displayed multiple times. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 Para. 1 lit. f GDPR.

Furthermore, DoubleClick can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

If you wish to object to participating in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies. Alternatively, you can find out about the setting of cookies and make settings for this at the Digital Advertising Alliance at the internet address www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.

Further information on DoubleClick by Google’s privacy policy can be found at the following internet address: http://www.google.de/policies/privacy/

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google AdSense uses so-called „DoubleClick DART Cookies“ („Cookies“). These are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called „web beacons“ (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google uses the information thus obtained to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser within the scope of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is legally required and/or insofar as third parties process this data on behalf of Google.

The described data processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties, whose ads are displayed on this website based on the evaluated user behavior. At the same time, the processing serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content for a fee.

Further information on Google’s privacy policy can be found at the following internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Google AdWordsPart of our website is the integration of the so-called Google AdWords service. This is an internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google AdWords allows an advertiser to pre-define certain keywords, by means of which an ad is displayed in Google’s search engine results only if the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed on thematically relevant websites by means of an automatic algorithm and in consideration of the previously defined keywords.

The operating company of Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on third-party websites and in the search engine results of Google, and to display third-party advertising on our website. The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must access the link www.google.de/settings/ads from each internet browser they use and make the desired settings there.

Further information and Google’s applicable data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/.

Google Analytics (with anonymization function)

Part of our website is the integration of the so-called Google Analytics service. This is a web analysis service of Google Inc. („Google“). Google Analytics uses so-called „cookies“. These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will, however, be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use the information obtained on behalf of the website operator to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de.

Further information and Google’s applicable data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics.

Google+

Our website uses so-called social plugins („plugins“) of the social network Google+, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The plugins are recognizable, for example, by buttons with the „+1“ sign on a white or colored background. An overview of the Google plugins and their appearance can be found here: https://developers.google.com/+/plugins If you access a page of our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google+ profile or are not currently logged in to Google+. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there. If you are logged in to Google+, Google can directly assign your visit to our website to your Google+ profile. If you interact with the plugins, for example by clicking the „+1“ button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed to your contacts there. For the purpose and scope of data collection and the further processing and use of the data by Google, as well as your related rights and setting options for protecting your privacy, please refer to Google’s data protection information: http://www.google.com/intl/de/+/policy/+1button.html If you do not want Google to directly assign the data collected via our website to your profile on Google+, you must log out of Google+ before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/).

Retargeting relevant This website uses retargeting technology from releva GmbH, Feilnerstr. 10, 10969 Berlin (www.releva.nz). This allows us to specifically target visitors to our website with personalized, interest-based advertising. The advertisements are displayed based on a cookie-based analysis of past usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests within a pseudonymized user profile and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. This means you will see advertisements that are highly likely to match your product and information interests. If the collected information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in displaying personalized advertising and market research.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. To generally object to the use of cookies on your computer, you can set your internet browser so that no more cookies can be stored on your computer in the future or already stored cookies are deleted. You can also permanently object to the setting of cookies or the creation of a pseudonymized user profile by using the available opt-out function at the following link:

https://releva.nz/datenschutz

Further information and the data protection regulations regarding advertising and releva GmbH can be found at https://releva.nz/datenschutz

12. Payment Processing

PayPal

Components of PayPal are integrated into our website. PayPal is an online payment service provider. Payments are processed via accounts that represent virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not have an account. An account is managed via an email address, which is why there is no classic account number. PayPal enables online payments to be initiated to third parties or payments to be received. PayPal also performs trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you use such payment options, we will transfer your personal data required for payment processing to PayPal. The scope of the personal data transferred typically includes: first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the processing of the purchase contract.

The purpose of the data transfer is payment processing and fraud prevention. A data transfer from us to PayPal will take place in particular if there is a legitimate interest in the data transfer. PayPal may transfer the personal data received to credit agencies as part of its own privacy policy. This transfer is for the purpose of identity and creditworthiness checks. PayPal may transfer personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf of. The data subject has the option to revoke consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The data transfer to PayPal described in this section only takes place if you select this payment option.

The applicable data protection regulations of PayPal can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Klarna

Components of Klarna are integrated into our website. Klarna is a payment service that enables cashless payment for products and services on the internet. Klarna provides a technical process through which the online merchant immediately receives a payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order.

The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If the data subject selects „Klarna“ as a payment option during the ordering process in our online shop, data of the data subject is automatically transmitted to Klarna. By selecting this payment option, the data subject consents to the transmission of personal data necessary for payment processing.

The personal data exchanged with Klarna includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. The purpose of the data transfer is payment processing and fraud prevention. The controller will also transmit other personal data to Klarna if there is a legitimate interest in the transmission. The personal data exchanged between Klarna and the controller may be transmitted by Klarna to credit agencies. This transmission is for the purpose of identity and creditworthiness checks.

Klarna may transfer personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf of.

The data subject has the option to revoke consent to the handling of personal data at any time vis-à-vis Klarna. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The applicable data protection regulations of Klarna can be accessed at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

Amazon Pay

The Amazon Payments payment method allows customers to use their payment data and specified payment methods stored at Amazon.de to pay in our online shop via their Amazon account.When you choose Amazon Payments as your payment method, the payment processing is handled directly by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg. If the customer selects „Amazon Payments“ as the payment method during the online ordering process, they must first log in with their Amazon account details. Amazon Payments uses the information from the customer’s Amazon account to first identify them and then process the payment.

For payments via Amazon Payments, the terms and conditions and data protection regulations of Amazon Payments Europe S.C.A. apply. You can find these on the website https://payments.amazon.de

JTL-eazyAuction

Order processing via the JTL-eazyAuction product is carried out by the service provider „JTL-Software“ (JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven). Your name, address, and, if applicable, other personal data will be passed on to JTL-Software exclusively for the purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on to the extent necessary for the processing of the order and thus for the contractual obligations. Details on data protection at JTL-Software and the data protection declaration of JTL-Software-GmbH can be viewed at the following link: https://www.jtl-software.de/datenschutz.

Google Pay

If you choose the „Google Pay“ payment method [from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter „Google“)], payment processing is carried out via the „Google Pay“ app on your mobile device (system requirements: at least Android 4.4 and an NFC function).

The charge is made to the payment card stored with Google Pay or a verified payment system there (e.g. PayPal). For payments over €25, you need to unlock your mobile device using the respective verification measure.

Google then transmits the payment information stored with Google Pay in the form of a one-time valid virtual card number, which contains no information about the actual payment method stored with Google Pay, to the seller for payment verification.

For all payments, Google Pay acts only as an intermediary. The transaction is carried out exclusively between the user and the original website by charging the payment method stored with Google Pay.

The information provided during the ordering process, along with order information, is passed on to Google.

The transfer and data processing are carried out for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Google may collect data for every payment made via Google Pay.

This includes:

Registration information
Information obtained from third parties:
Transaction information

This processing is carried out based on the legitimate interest in proper accounting, the verification of transaction data, and the optimization and maintenance of the Google Pay service in accordance with Art. 6 Para. 1 lit. f GDPR. If data is collected by other Google services, Google may combine this data with the data collected during the payment process.

Further terms of use for Google Pay can be found at:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found at:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Apple Pay

If you choose the „Apple Pay“ payment method [from Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter „Apple“)], payment processing is carried out via the „Apple Pay“ function of your device (system requirements: macOS, iOS or watchOS).

The charge is made to a payment card stored with „Apple Pay“. For a payment, approval by your device’s respective verification method is necessary.

Apple Pay uses security features built into your device’s hardware and software to protect your transactions. According to Apple, Apple Pay is designed to protect your personal data. Apple does not store or have access to the original credit, debit, or prepaid card numbers used with Apple Pay. In addition, Apple does not store transaction data that can be traced back to you when you use Apple Pay with credit, debit, or prepaid cards. Your transactions are only visible to you, the merchant or developer, and your bank or card issuer.

For the purpose of payment processing, the information provided during the ordering process and order information are transmitted to Apple in encrypted form. This encrypted data is then re-encrypted by Apple and transmitted to the payment service stored in Apple Pay.

After successful payment, Apple sends your device account number along with the transaction-specific, dynamic security code to the app or website. Neither Apple nor your device sends the actual number of your payment card to the app.

The transfer is made for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR. If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve „Apple Pay“ and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to confirm a purchase you made via Safari on your Mac, your Mac and the authorization device communicate over an encrypted channel on Apple’s servers. Apple does not retain any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Select „Wallet & Apple Pay“ and disable „Allow Payments on Mac“.

Further information on data protection at Apple Pay can be found at: https://support.apple.com/de-de/HT203027