Privacy policy

Privacy policy

We take data protection seriously

Protecting your privacy when processing personal data is an important concern for us. For this reason, we only process personal data if this makes sense and is economically relevant for the use of our services. In any case, we adhere to the regulations of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Below you will find information about which data is processed, in what form and by whom when you visit our shop https://ahead-nutrition.com/ visit.

1. Who is responsible for data processing and who can you contact?

Responsible for

ahead GmbH
Raboisen 32
20095 Hamburg
Phone: +49 40 24862645

Email: sb@ahead-nutrition.com

Our data protection officer is:
J. Shower,
Raboisen 32
20095 Hamburg
Phone: +49 40 24862645
Email: sb@ahead-nutrition.com

2. Personal Data

Personal data is data about you that makes you identifiable. This includes, for example, your name, address, email address, location data, payment data and many other details. In principle, you do not have to disclose any personal data in order to visit our website. However, in some cases we need this in order to be able to offer you the desired services on our website. If you use one of our services where this is necessary, we generally only collect the data that is necessary for this and not without your consent.

3. Visit our website

3.1 General Use

When you visit our website, our web servers store by default the IP of your Internet service provider, the website from which you visit us, the websites that you visit on our site and the date and duration of the visit. The processing of this information is absolutely necessary for the technical transmission of the websites, the comfortable use of our services and secure server operation. Our legitimate interest arises from Article 6 Paragraph 1 Letter f) GDPR.

A direct conclusion about your identity is not possible based on the information and will not be drawn by us. The information is stored and automatically deleted after the aforementioned purposes have been achieved. The standard deadlines for deletion depend on the criterion of necessity.

 

3.1.1 Automatically saved data (server log files)

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser used and operating system used
  • Complete IP address of the requesting computer
  • transferred amount of data

This data will not be merged with other data sources. Processing takes place in accordance with Article 6 Paragraph 1 Letter f of the GDPR Basis our legitimate interest in improving the stability and functionality of our website.   

For reasons of technical security, in particular to prevent attempts to attack our web server, we store this data for a short time. It is not possible for us to draw conclusions about individual people based on this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a connection to the individual user. The data is also processed in anonymized form for statistical purposes; A comparison with other data sets or a transfer to third parties, even in extracts, does not take place.

 

3.1.2 Cookies, tracking pixels and tools

 When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. You can find an overview of the cookies we use here.

By using session cookies, the person responsible can provide the users of this website with a user-friendly service that would not be possible without the setting of cookies. Without consent, we only use technically necessary cookies on the legal basis of legitimate interest in accordance with Article 6 (1) (f) GDPR.

We only use personal cookies to improve our website or for marketing/advertising purposes with your consent. During your first visit, you can voluntarily agree to the tracking or analysis via the cookie banner that appears. If necessary, your data will be passed on to partners or third-party providers. These cookies will only be stored if you explicitly agree to this; the legal basis is then your consent in accordance with Article 6 (1) (a) GDPR.

You can change your settings for the use of cookies here at any time.

3.1.3 Social plugins from Facebook, Pinterest, Instagram and YouTube

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection is established with the servers of the respective provider when our website is accessed. If you click on one of the buttons, the website of the respective social network opens in a new window in your browser. There you can, for example, press the Like or Share button.

 

3.2 Online presence and service optimization

 Shopify

We host our website at Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”).

Shopify is a tool for building and hosting e-commerce websites. When you visit our website, Shopify collects your IP address as well as information about the device and browser you use. Shopify also analyzes the number of visitors, the sources of visitors, and customer behavior and creates user statistics. When you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment information and other information related to the purchase (e.g. phone number, amount of sales made etc.). Shopify stores cookies in your browser for analysis purposes.

Details can be found in Shopify's privacy policy:

https://www.shopify.de/legal/datenschutz.

The use of Shopify is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If appropriate consent has been requested, processing is carried out exclusively on the basis of Article 6 Para. 1 lit. a GDPR and 25 Para. B. Device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

 

We have concluded a contract for order processing (AV) in accordance with Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law, which ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

usercentrics

This website uses Usercentrics' consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website:

https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:

 

  • Your consent (s) or the revocation of your consent (s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website

 

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign you the granted consent or its revocation. The data collected in this way will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6 (1) (c) GDPR.

 We have concluded a contract for order processing (AV) in accordance with Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law, which ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

 

Google reCAPTCHA

On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). This function is primarily used to distinguish whether an entry is made by a natural person or whether it is improperly processed through machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Paragraph 1 Letter a GDPR Basis Your consent, provided you have given it to us via the consent banner. Since data protection is very important to us and we want to keep the interference for you as low as possible, we do not use the Google service permanently, but only in certain situations. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come to the USA.

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC. certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

 

 

3.3 Tools and services for analysis, statistical collection and marketing

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that we use to provide tracking or statistical tools and others

We can integrate technologies on our website. Google Tag Manager itself does not create one

User profiles, does not store cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

The use of the Google Tag Manager is based on Art. 6 Para. 1 lit. f GDPR. The

Website operators have a legitimate interest in quickly and easily integrating and managing various tools on their website. If appropriate consent has been requested, processing is carried out exclusively on the basis of Article 6 Para. 1 lit. a GDPR and 25 Para. B. Device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

 

 

Google Analytics (4)

This website uses functions of the web analytics service Google Analytics. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as B. Page views, length of stay, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, we can use Google Analytics to record your mouse and scrolling movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there. The use of this service is based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG. Consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

 

Browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can find more information on the handling of user data at Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.

Google Analytics Ecommerce Measurement

This website uses the “E-Commerce Measurement” feature of Google Analytics. With the help of e-commerce measurement, the website operator can analyze the purchasing behavior of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing a product to purchasing it are recorded. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device.

 

Google Optimize
The website operator uses Google Optimize. Google Optimize is an optimization program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Optimize analyzes the use of different versions of the website so that we are able to adapt the user-friendliness according to the behavior of website users. Google Optimize is a tool integrated into Google Analytics and uses cookies.
The IP address received in this way is anonymized immediately after processing. In exceptional cases, the full IP address is sent to a Google server in the USA and encrypted there. The transmitted IP address will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser accordingly.
However, we would like to point out that in this case not all functions of our website may be able to be used to their full extent.

 

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and 25 Para. 1 TTDSG. Consent can be revoked at any time.

 

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program from Google

Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites

when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be based on the user data available on Google (e.g.

Location data and interests) are played out (target group targeting). We as the website operator

We can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and 25 Para. 1 TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here:

https://policies.google.com/privacy/frameworks and

https://privacy.google.com/businesses/controllerterms/mccs/.

 

Google AdSense

This website uses Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

 

We use Google AdSense in "non-personalized" mode. In contrast to the personalized mode, the advertisements are therefore not based on your previous user behavior and no user profile is created by you. Instead, so-called “context information” is used when selecting advertising. The selected advertisements then depend, for example, on your location, the content of the website you are on or your current search terms. For more on the differences between personalized and non-personalized targeting with Google AdSense, see:

https://support.google.com/adsense/answer/9007336.

Please note that cookies or comparable recognition technologies (e.g. device fingerprinting) can also be used when using Google Adsense in non-personalized mode. According to Google, these are used to combat fraud and abuse.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and 25 Para. 1 TTDSG. Consent can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:

Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

You can customize your advertising settings independently in your user account. Click on the following link and log in:

https://adssettings.google.com/authenticated.

More information about Google's advertising technologies can be found here:

https://policies.google.com/technologies/ads and

https://www.google.de/intl/de/policies/privacy/.

 

Google Campaign Manager

This website also uses the online marketing tool Campaign Manager from Google, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Campaign Manager uses cookies to show ads that are relevant to users, improve campaign performance reporting, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which advertisements are shown in which browser and can thus prevent them from being displayed multiple times. In addition, Campaign Manager can use cookie IDs to record conversions that are related to ad requests. This is the case, for example, if a user sees a Campaign Manager ad and later uses the same browser to access the advertising company's website and buys something there.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and will therefore inform you according to our level of knowledge: By integrating the Campaign Manager, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, there is a possibility that Google will find out and store your IP address.

In addition, the Campaign Manager cookies used (e.g. referred to as DoubleClick or Floodlight) enable us to understand whether you carry out certain actions on our website after you have viewed one of our display/video ads on Google or on another platform via the Campaign Manager accessed or clicked on them (conversion tracking). Campaign Manager uses this cookie to understand the content you have interacted with on our websites in order to later send you targeted advertising.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and 25 Para. 1 TTDSG. Consent can be revoked at any time.

For more information about Campaign Manager, see https://marketingplatform.google.com/about/enterprise/ as well as data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Google has submitted to the Data Privacy Framework Program and is certified: https://www.dataprivacyframework.gov/s/

tik tok pixels

We use the TikTok pixel on our website. The TikTok Pixel is a TikTok advertiser tool from two providers:

  • TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and
  • TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (both hereinafter collectively referred to as “TikTok”)

 

The TikTok Pixel is a snippet of JavaScript code that allows us to understand and track visitor activity on our website. The Tiktok Pixel collects and processes information about the creators of our website or the devices they use (so-called event data).

The event data collected via the TikTok Pixel is used to target our ads and to improve ad delivery and personalized advertising. For this purpose, the event data collected on our website using the TikTok pixel is transmitted to TikTok.

Some of this event data is information that is stored in the device you use. In addition, cookies are also used via the TikTok Pixel, through which information is stored on the device you use. Such storage of information by the TikTok Pixel or access to information that is already stored in your device will only take place with your consent. The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and 25 Para. 1 TTDSG. Consent can be revoked at any time.

 

This collection and transmission of event data is carried out by us and TikTok as joint controllers in accordance with Art. 26 GDPR. We have entered into an agreement with TikTok regarding processing as joint controllers, which stipulates the distribution of data protection obligations between us and TikTok. In this Agreement, we and TikTok have agreed, among other things,

 

  • that we are responsible for providing you with all information pursuant to Art. 13, 14 GDPR on the joint processing of personal data;
  • that TikTok is responsible for respecting the rights of data subjects

Articles 15 to 20 GDPR with regard to the personal data stored by Tik Tok after joint processing.

You can read the agreement between us and TikTok at https://ads.tiktok.com/i18n/official/article?aid=300871706948451871 recall.

TikTok is solely responsible for the processing of the transmitted event data that follows the transmission. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how you can exercise your rights against TikTok, see TikTok's data policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

 

3.4 Contact form

When you contact us (e.g. via contact form, email, telephone or via social media), the data sent by the person making the request will be processed to the extent that this is necessary to answer the contact requests and any requested measures and as part of data backup stored on our servers. We will only use your data to process your request. Your data will be treated confidentially. It will not be passed on to third parties.

 

Responding to the contact requests in the context of contractual or pre-contractual relationships is to fulfill our contractual obligations or to answer (pre) contractual requests and otherwise on the basis of legitimate interests in answering the requests.

 

  • Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms).
  • Affected people: Communication partner.
  • Purposes of processing: Contact requests and communication.
  • Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 lit. f. GDPR).

 

3.5 customer account

Contractual partners can create an account within our online offering (e.g. customer or user account, “customer account” for short). If it is necessary to register a customer account, contractual partners will be informed of this as well as the information required for registration. Customer accounts are not public and cannot be indexed by search engines. As part of the registration and subsequent logins and use of the customer account, we store the customers' IP addresses along with the access times in order to be able to prove registration and prevent any misuse of the customer account.

When customers cancel their customer account, the data relating to the customer account is deleted, subject to retention being required by law. It is up to the customer to save their data upon termination of the customer account.

 

3.6 Shop and e-commerce

We process the data of our customers in order to enable them to select, purchase or order the selected products, goods and associated services, as well as their payment and delivery or execution. If necessary for the execution of an order, we use service providers, in particular postal, forwarding and shipping companies, to carry out the delivery or execution for our customers. We use the services of banks and payment service providers to process payment transactions. The required information is marked as such in the context of the ordering or comparable acquisition process and includes the information required for delivery or provision and billing as well as contact information in order to be able to hold any consultation.

 

  • Types of Data Processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject of the contract, term, customer category), usage data (e.g. websites visited, interest in content, access times ), meta/communication data (e.g. device information, IP addresses).
  • Affected people: Interested parties, business and contractual partners, customers.
  • Purposes of processing: Provision of contractual services and customer service, contact requests and communication, office and organizational procedures, management and response to inquiries, security measures, conversion measurement (measuring the effectiveness of marketing measures), interest-based and behavioral marketing, profiling (creating user profiles).
  • Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legal obligation (Art. 6 Para. 1 S. 1 lit. c. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

 

3.6.1. Purchase of goods

If you are already a customer and you interrupt the process during a new ordering process or are unable to complete your purchase, we will remind you by email or SMS after a certain period of time about the items you have placed in your shopping cart so that you can do so do not have to reassemble (“Abandoned Cart”) or send you a message with the items viewed (“Abandoned Browse”). We use cookies for this. Further information on the use of cookies can be found under Section 3.1.2 (“Cookies, tracking pixels and tools”).

The legal basis for sending notifications is Section 7 Paragraph 3 UWG. You can object to the sending of notifications at any time, for example by contacting us via the corresponding link in the email you receive.

3.7.1. Customer information

Unless you have objected, we will use the email address and mobile phone number that you provided when purchasing goods or services to send electronic advertisements about our own goods or services that are similar to those that you have already purchased from us or have taken advantage of. We use your email address, mobile phone number, name and order history to send you information about products you have purchased Basis of your recent orders. The legal basis for data processing is Article 6 Paragraph 1 Letter F GDPR and Section 7 Paragraph 3 UWG.

You can object to this processing at any time in accordance with Article 21 Para. 2 GDPR, for example by contacting us via the corresponding link in the email you receive or by sending an email to  service @ahead-nutrition.com write.

 

3.7.2. Newsletter

On our website we offer the opportunity to register for our newsletter. After registering, we will regularly inform you by email and SMS about news about our offers (e.g. promotions, new products, re-stocks and competitions).

Furthermore, after a certain period of time, you will be reminded by email and SMS about the items that you have placed in your shopping cart and whose order you had to interrupt or whose purchase you were unable to complete.

A valid email address or mobile phone number is required to register for the newsletter. To verify your email address, you will first receive a registration email, which you must confirm using the link. To verify your mobile phone number, you will receive a registration SMS, which you must confirm via the link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your email address and mobile phone number based on your consent. The legal basis for processing is based on Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR.

You can unsubscribe from our newsletter at any time, for example by contacting us via the corresponding link in the email you receive or by sending an email to  service @ahead-nutrition.com write.

 

3.7.3. service provider

We use Klaviyo to send customer information and newsletters. The provider is Klaviyo, Inc., 125 Summer St Floor 6, Boston, MA 02111, United States (hereinafter “Klaviyo”). Klaviyo provides marketing automation software for marketing services and products including SEO and content creation, lead management, newsletters, email and SMS marketing, and web analytics. Klaviyo uses cookies and other browser technologies to evaluate user behavior and identify users. This information is used, among other things, to compile reports on website activity and to provide customers with personalized communications (e.g. reminders about uncompleted purchases, notifications about products that customers have viewed, etc.). In addition, Klaviyo is used to store and transmit data entered in forms using cookies, including your IP address. In this case, your data will be shared with Klaviyo, Inc

 

The data you enter to receive the newsletter (e.g. email address) is stored on Klaviyo's servers United States saved.

 

The data you provide to us for the purpose of subscription will be stored by us until you unsubscribe from us or the service provider and will be deleted from the distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

 

3.7.4. Analysis

With the help of Klaviyo we can, among other things, analyze our newsletter campaigns. If you have one with

When you open an email sent by Klaviyo, a file contained in the email (so-called web beacon) connects to Klaviyo's servers in the USA. This makes it possible to determine whether a newsletter message was opened and which links, if any, were clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.

 

If you do not want analysis by Klaviyo, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Data processing is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

 

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. This does not affect data that we have stored for other purposes.

 

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:

Details can be found here: https://www.klaviyo.com/legal/dpa

After you are removed from the newsletter distribution list, your e-mail address will be with us or the

Newsletter service providers may be stored in a blacklist if this is to prevent future

Mailings are required. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.

 

For more information, please see Klaviyo's privacy policy at:

https://www.klaviyo.com/legal/privacy-notice

 

We have concluded a contract for order processing (AV) in accordance with Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law, which ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

 

 

3.8. Review Requests

Integration of the Trusted Shop Trustbadge

To display our Trusted Shops quality seal and the collected reviews as well as the offer of Trusted Shops products for buyers after placing an order, the Trusted Shops Trust Badge is included on this website.

This serves to safeguard our predominantly legitimate interests in the optimal marketing of our offer in the context of a weighing of interests. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne.
When the Trustbadge is called, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transmitted and the requesting provider (access data) and documents the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Other personal data will only be transferred to Trusted Shops, as far as you have consented to this, decide after the completion of an order for the use of Trusted Shops products or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.


3.9 Economic analyzes and market research

For business reasons and in order to be able to identify market trends, the wishes of contractual partners and users, we analyze the data we have on business transactions, contracts, inquiries, etc., whereby the group of persons concerned includes contractual partners, interested parties, customers, visitors and users of our online offer can fall.

The analyzes are carried out for the purpose of business evaluations, marketing and market research (e.g. to determine customer groups with different characteristics). If available, we can take into account the profiles of registered users including their information, for example about the services they have used. The analyzes serve us alone and are not disclosed externally unless they are anonymous analyzes with summarized, i.e. anonymized, values. We also take the privacy of users into account and process the data for analysis purposes as pseudonymously as possible and, if possible, anonymously (e.g. as summarized data).

  • payment service

 Im Rahmen von Vertrags- und sonstigen Rechtsbeziehungen, aufgrund gesetzlicher Pflichten oder sonst auf Grundlage unserer berechtigten Interessen bieten wir den betroffenen Personen effiziente und sichere Zahlungsmöglichkeiten an und setzen Hierzu nensterungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsungsunung strangerjungsungsunny strangerjungsungsungsungsungsunny strangerjungsungsunny strangerjungsungsunny strangerjungsungsunny strangerjungsungsunny stranger program

 

Information processed by payment service providers includes inventory data, such as the name and address, bank details, such as bank account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, summary and recipient-related information. The information is required to complete the transactions. However, the data entered will only be processed and stored by the payment service providers. That is, we do not receive any account or credit card information, but only information with confirmation or negative disclosure of the payment. The data may be transmitted by the payment service providers to credit reporting agencies. This transmission aims at the identity and credit check. For this we refer to the terms and conditions and the privacy policy of the payment service providers.

For the payment transactions, the terms and conditions and the privacy notices of the respective payment service providers, which are available within the respective websites or transaction applications apply. We also refer to these for further information and assertion of rights of revocation, information and other data subjects.

 

3.11 Transport service providers

For the purpose of delivering ordered goods, we work with logistics service providers/transport companies and/or shipping partners to whom the following data is transmitted for the purpose of delivering the ordered goods or for the purpose of shipment notification: first name, last name, postal address and, if applicable, email -Address and, if applicable, the telephone number. The legal basis for processing is Article 6 Paragraph 1 Letter b) GDPR.

 

3.12 security

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All of our employees and service providers (processors) who work for us are obliged to comply with applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a constant improvement process and our data protection declarations are constantly revised. Please make sure you have the latest version.

 

 4. Online presence on social media

If you have given your consent to the respective social media operator in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on our social media channels. from which usage profiles are created using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that presumably match your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media operator as well as a contact option and your related rights and setting options to protect your privacy, please refer to the data protection information linked by the providers on their websites. If you still need help with this, you can contact us.

 

 5. Rights of those affected

You have a right to information, correction, deletion or restriction of processing of your stored data at any time, a right to object to processing as well as a right to data portability and a right to lodge a complaint in accordance with the requirements of data protection law.

 

  • Right to information:

You can request information from us as to whether and to what extent we process your data.

 

  • Right to rectification:

If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time.

 

  • Right to erasure:

You can request that we delete your data if we are processing it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, for example in the case of legally regulated retention obligations.

Regardless of whether you exercise your right to deletion, we will delete your data immediately and completely, provided that there is no legal or statutory retention obligation to the contrary.

 

  • Right to restriction of processing:

You can ask us to restrict the processing of your data if

- You contest the accuracy of the data, for a period enabling us to verify the accuracy of the data.

- the processing of the data is unlawful, but you refuse to delete it and instead request a restriction on the use of the data,

- we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or

- You have objected to the processing of your data.

 

  • Right to data portability:

You can request that we provide you with the data that you have provided to us in a structured, common and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided that

- we process this data based on your revocable consent or to fulfill a contract between us, and

- this processing is carried out using automated procedures.

If it is technically feasible, you can request that we transmit your data directly to another person responsible.

 

  • Right to:

If we process your data for legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for direct advertising purposes at any time without giving reasons.

 

  • Right of appeal:

If you are of the opinion that we are violating German or European data protection law when processing your data, we ask you to contact us to clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision.

If you wish to assert one of the rights mentioned against us, please contact our data protection officer. If in doubt, we may request additional information to confirm your identity.

 

 6. Changes to this Privacy Policy

We reserve the right to change our data protection declarations at any time, for example if this becomes necessary due to new technologies. Please make sure you have the latest version. If fundamental changes are made to this data protection declaration, we will announce these on our website.

7. Access data and hosting

You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the website.

Hosting services by a third party
Within the framework of a processing on our behalf, a third party provider provides the services for hosting and displaying the website. This serves to safeguard our legitimate interests, which are predominantly justified in the interests of weighing up our interests, in order to correctly present our offer. All data collected as part of the use of this website or in designated forms in the online shop as described below will be processed on its servers. Processing on other servers takes place only in the frame explained here.

This service provider is located within a country of the European Union or the European Economic Area.

8. Data collection and use for contract processing and opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order, when you contact us (e.g. using the contact form or email) or when you open a customer account. Mandatory fields are marked as such, because in these cases we need the data to process the contract, to process your contact or to open a customer account and you cannot complete the order and / or open an account without specifying them or send the contact . Which data is collected can be seen from the respective input forms. We use the data you provide to process contracts and your inquiries. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this is permitted by law and about which we will inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided in the customer account.

9. Data Sharing

To fulfill the contract we share your information with the staff responsible for the shipping company insofar as this ordered for delivery of goods is required. Depending on which payment service you select during the ordering process, we give to process payments for this payment data to the agency responsible for paying bank charges and possibly commissioned by us on payment service or to the selected payment service. Some of the selected payment service collect this data itself, as far as you there create an account. In this case, you must log on in the ordering process with your credentials with the payment service provider. It is so far the privacy statements of each payment service provider.

We use payment service providers based in a state outside the European Union. The transfer of personal data to this company takes place only in the context of the need to fulfill the contract.

10. E-mail newsletters and mail advertising

E-mail advertising with registration for the newsletter
When you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent.

The deregistration from the newsletter is possible at any time and can be done either by a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing we delete your e-mail address, as far as you have not expressly consented to a further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this statement.

The newsletter is sent as part of a processing on our behalf by a service provider, to which we pass on your e-mail address.

This service provider is located in the US and is certified under the EU-US Privacy Shield. A current certificate can here be viewed. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

We use the Klaviyo tool to send our newsletter. Klaviyo is a service provided by Klaviyo Inc, Boston, USA. Your data stored when registering for the newsletter (e-mail address, name if applicable, IP address, date and time of your registration) will be transferred to a Klaviyo Inc. server in the USA and stored there in compliance with the "EU -US Privacy Shields". For more information on privacy at Klaviyo, visit: http://klaviyo.com/privacy/. You can cancel or revoke your subscription to this newsletter and thus your consent to the storage of your data at any time for the future. Details on this can be found in the confirmation email and in each individual newsletter.

We use the services of Klaviyo, Inc ("Klaviyo") to analyze user behavior in our online shop for our own advertising and market research purposes. Klaviyo also uses cookies and can link your behavior in our webshop with your personal data, provided you have signed up for our newsletter, created a customer account or completed an order process in our webshop. You can find Klaviyo's privacy policy at https://www.klaviyo.com/privacy

If you want to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

To protect your data in the USA, we have a data processing contract with Klaviyo ("Data-Protection addendum ") Basis of the European Commission's Standard Contractual Clauses to enable the transfer of your personal data to Klaviyo. If you are interested, this data processing contract can be viewed at the following Internet address: https://www.klaviyo.com/privacy/dpa.

Postal advertising and your right to object
We also reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, in addressing our customers with advertising.

The advertising mailings are provided as part of a processing on our behalf by a service provider, to which we pass on your data.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

11. Integration of the Trusted Shops Trust Badge

To display our Trusted Shops quality seal and the collected reviews as well as the offer of Trusted Shops products for buyers after placing an order, the Trusted Shops Trust Badge is included on this website.

This serves to safeguard our predominantly legitimate interests in the optimal marketing of our offer in the context of a weighing of interests. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne.
When the Trustbadge is called, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transmitted and the requesting provider (access data) and documents the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Other personal data will only be transferred to Trusted Shops, as far as you have consented to this, decide after the completion of an order for the use of Trusted Shops products or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

12. Cookies and web analytics

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can see the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:
Internet Explorer ™: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
Safari ™: https://support.apple.com/kb/ph21411?locale=en_US
Chrome ™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox ™ https://support.mozilla.org/en/kb/cookies-allow-and-recognize
Opera ™: http://help.opera.com/Windows/10.20/cookies.html

If cookies are not accepted, the functionality of our website may be restricted.

As part of the application of Google Analytics (see below), this website also uses the so-called DoubleClick cookie, which enables your browser to be recognized when you visit other websites. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, in optimal marketing of our website. The information automatically generated by the cookie about your visit to this website is transmitted to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymization on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website activity. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, in optimal marketing of our website. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
Google Double Click is an offer from Google LLC. (Www.google.de).
Google LLC is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can here be viewed. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can use the DoubleClick cookie over this link deactivate. You can also join in the Digital Advertising Alliance inform about the setting of cookies and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website.

Use of Google (Universal) Analytics web analytics
This website uses Google (Universal) Analytics, a web analysis service from Google LLC (www.google.de), for website analysis. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer. Google (Universal) Analytics uses methods that enable your use of the website to be analyzed, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating the IP anonymization on this website, the IP address is shortened before it is transmitted within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data.

Google LLC is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can here be viewed. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, the browser plug-in, you can this link click to prevent detection by Google Analytics on this website in the future. Here an opt-out cookie is stored on your device. Clear your cookies, you must click the link again.

Push notifications

You can sign up to receive our push notifications. To send our push notifications, we use the "CleverPush" shipping service, which is provided by CleverPush GmbH, Nagelsweg 22, 20097 Hamburg (“CleverPush”).

You will regularly receive breaking news from our newsroom via our push notifications. To register, you must confirm your browser's query to receive notifications. This process is documented and saved by CleverPush. This includes saving the time of registration and your browser ID or device ID. The collection of this data is necessary so that we can understand the processes in the event of misuse and therefore serves our legal protection.

In order to be able to show you the push notifications, CleverPush collects and processes your browser ID and, in the case of mobile access, your device ID on our behalf. By subscribing to our push notifications, you agree to receive them. If you have given your consent, the legal basis for processing your data after registering for our push notifications is Article 6 (1) (a) GDPR.

CleverPush also statistically evaluates our push notifications. This enables CleverPush to recognize whether and when our push notifications were displayed and clicked on by you.

You can revoke your consent to the storage and use of your personal data to receive our push notifications and the statistical survey described above at any time with effect for the future. For the purpose of revoking your consent, you can change the intended setting for receiving push notifications in your browser. If you use our push notifications on a desktop PC with the “Windows” operating system, you can also unsubscribe from our push notifications by right-clicking on the respective push notification in the settings that appear there.

Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your data will therefore be stored for as long as the subscription to our push notifications is active. The registration process is explained in detail under the following link: https://cleverpush.com/faq

Use of Hotjar for web analysis

On our website we use the Hotjar web analysis service from Hotjar Ltd .. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe

tel .: +1 (855) 464-6788).

With this tool, movements on our website can be traced (so-called heatmaps). For example, it can be seen how far users scroll and which buttons users click and how often. The tool can also be used to obtain feedback directly from website users. In this way, we obtain valuable information to make our website even faster and more customer-friendly.

When using this tool, we pay particular attention to the protection of your personal data. So we can only understand which buttons are clicked, the course of the mouse, how far is scrolled, the screen size of the device, device type and browser information, geographical location (only the country) and the preferred language to display our website. Areas of the websites in which personal data from you or third parties are displayed are automatically hidden by Hotjar and are therefore never traceable.

Hotjar offers every user the option of preventing the use of the Hotjar tool with the aid of a “Do Not Track Header” so that no data is recorded about the visit to the respective website. This is a setting that all common browsers support in current versions. To do this, your browser sends a request to Hotjar to deactivate the tracking of the respective user. Should you ahead- If you use websites with different browsers / computers, you must set up the “Do Not Track Header” for each of these browsers / computers separately.

Detailed instructions with information about your browser can be found at:

https://www.hotjar.com/opt-out

More information about Hotjar Ltd. and the Hotjar tool can be found at:

https://www.hotjar.com

Hotjar Ltd.'s privacy policy can be found at:

https://www.hotjar.com/privacy

Use of Tracify for web analysis

Responsible body: Tracify GmbH iG
Tracify is a web analysis service. Tracify uses the collected data to track and investigate how this website is used and to compile reports on its activities.
Data used: Browser and client configuration, usage data, IP address, order information, contact details
Processing place: Germany
Retention period: ≤ 5 milliseconds - after that, all data is completely anonymized.

13. Advertising via marketing networks

Google AdWords Remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous CookieID and based on the pages you have visited. This serves to safeguard our predominantly legitimate interests in the optimal marketing of our website in the context of a weighing of interests.

Additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account by Google and information from your Google Account will be used to personalize your ads on the web see. In this case, when you log in to Google during the page visit of our website, Google uses your data with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily associate your personal information with Google Analytics data to create audiences.

Google AdWords Remarketing is an offer from Google LLC (www.google.com). Google LLC is headquartered in the US and is certified under the EU-US Privacy Shield. A current certificate can here be viewed. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can use the remarketing cookie over this link deactivate. You can also join in the Digital Advertising Alliance inform about the setting of cookies and make settings for this.

14. Billbee

Order processing is carried out via the service provider “Billbee” (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address and, if applicable, other personal data will be passed on to Billbee exclusively for the purpose of processing the online order in accordance with Article 6 Paragraph 1 Letter b of the GDPR. Your data will only be passed on to the extent that this is actually necessary to process the order. Details about Billbee's data protection and its data protection declaration can be found on Billbee's website at "billbee.io".

15. Social Media PlugIns

Use of social plugins from Facebook, Instagram
Our website uses social plugins ("plugins") from social networks.
When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plug-in is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example press the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and shown to your contacts there.
Purpose and scope of the data collection and the further processing and use of the data by the provider as well as a contact option and your related rights and settings options to protect your privacy, please refer to the privacy policy of the provider.
http://www.facebook.com/policy.php
https://help.instagram.com/155833707900388

If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you must log out of the relevant service before visiting our website. You can completely prevent the loading of the plugins with add-ons for your browser, e.g. B. with the script blocker "NoScript" (http://noscript.net/). "

16. Sending evaluation reminders by e-mail

If you have given us your express consent to this during or after your order, we will use your e-mail address as a reminder to submit an evaluation of your order via the evaluation system we use.
This consent can be withdrawn at any time by a message to the contact option described below.

Valuation reminder by Trusted Shops
If you have given us your express consent to this during or after your order, we will send your email address to the Trusted Shops GmbH, Subbelrather Str.15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder by email.

This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.


17. Information text for the online data protection information of the advertising partner for Sovendus Sales (voucher offers)

Online data protection information (of the advertising partner): ...

Voucher offers from Sovendus GmbH: In order to select a voucher offer that is currently of interest to you, we pseudonymize and encrypt the hash value of your e-mail address and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 Para.1 f GDPR). The pseudonymised hash value of the e-mail address is used to take into account a possible objection to advertising from Sovendus (Art. 21 Para.3, Art. 6 Para.1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days (Art. 6 Para.1 f GDPR). In addition, we transmit the order number, order value with currency, session ID, coupon code and time stamp to Sovendus in pseudonymised form for billing purposes (Art. 6 Para.1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising contradiction to your e-mail address and you click on the voucher banner that is only displayed in this case, we will encrypt your title, name, postcode, country and your e-mail address. Address sent to Sovendus to prepare the voucher (Art. 6 Para.1 b, f GDPR).

For more information on the processing of your data by Sovendus, please refer to the online data protection information at www.sovendus.de/datenschutz.

18. Recova
On this website is the software solution of the visitor recovery service provider Exceed Solutions GmbH, c/o Bennet Polenz, Bunsenstr. 5, 22765 Hamburg, on duty.

No personal or related data is transferred to the named service provider. The service provider only uses a technically necessary cookie. It contains technical information and no personal information
Dates.
All data protection relevant information about Exceed Solutions GmbH can be found at https://recova.ai/de/datenschutzerklaerung.

19. Contact and your rights

You have the right to free information about the data we have stored about you and, if necessary, a right to correction, restriction of processing, data portability or deletion of this data.

For questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent or objection to a particular use of data, please contact us directly via the contact details in our imprint.

You also have the right to lodge a complaint with the responsible data protection supervisory authority.

************************************************** ******************
Right of objection
Insofar as we process personal data as explained above in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you will only have the right to object if there are grounds arising from your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of serves legal claims.

This does not apply if the processing is done for the purposes of direct marketing. Then we will no longer process your personal data for this purpose. ************************************************** ******************