Privacy Policy

1. General Information and Details of the Controller

1.1 Information on Data Protection

Thank you for visiting our website and for your interest in our services. Below, we explain how we process personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
PAJ UG (haftungsbeschränkt)
Am Wieschen 1
51570 Windeck
Germany
Telephone: +49 (0) 2292 39 499 59
Email: info@paj-gps.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 Data Protection Officer

The controller has appointed a data protection officer. You can contact him using the following details:
Johannes Schmitz
Am Wieschen 1
51570 Windeck
Telephone: +49 (0) 2292 3949959
Email: j.schmitz@paj-gps.de

2. Collection of Data When You Visit Our Website

2.1 Server Log Files

If you use our website solely for informational purposes, meaning that you neither register nor otherwise provide us with information, we collect only the data that your browser automatically transmits to our website server. This data is stored in what are known as server log files.
When you visit our website, the following technically necessary information is collected so that we can display the website to you:

• the page of our website that you accessed,
• the date and time of access,
• the amount of data transferred in bytes,
• the source or referral through which you reached our website,
• the browser you use,
• the operating system you use,
• the IP address used, where applicable in anonymised form.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the stability and functionality of our website. The data collected is neither disclosed nor used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 SSL or TLS Encryption

For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3. Use of Cookies

We use cookies to make our website attractive and to provide certain functions. Cookies are small text files that are stored on your device.
Some cookies are automatically deleted as soon as you close your browser. These are known as “session cookies”. Other cookies remain stored on your device for a longer period and allow, for example, page settings to be saved. These are known as “persistent cookies”. You can find the respective storage period in the overview of your web browser’s cookie settings.
Where personal data is processed through individual cookies, processing is based, depending on the purpose, on one of the following legal bases:

• Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract,
• Art. 6(1)(a) GDPR, where you have given your consent,
• Art. 6(1)(f) GDPR, where processing serves our legitimate interests in ensuring the best possible functionality of the website and in providing a customer-friendly and effective website experience.

You can configure your browser to inform you when cookies are placed. You can also decide whether to accept individual cookies or exclude the acceptance of cookies in certain cases or generally.
Please note that individual functions of our website may be restricted if you do not accept cookies.

4. Contact

4.1 Review Reminders via Trusted Shops

We use the following provider to send review reminders:
Trusted Shops AG
Subbelrather Str. 15c
50823 Cologne
Germany
Your email address and, where applicable, other customer data will only be transmitted to Trusted Shops if you have expressly consented in advance. The legal basis is Art. 6(1)(a) GDPR. The provider may then remind you by email to submit a review.
You may withdraw your consent at any time with effect for the future, either by contacting us or the provider directly.
We have concluded a data processing agreement with the provider. This agreement protects the data of our website visitors and prohibits unauthorised disclosure to third parties.

4.2 Processing Customer Enquiries via Zammad

We use the email ticketing system of the following provider to process customer enquiries:
Zammad GmbH
Marienstraße 11
10117 Berlin
Germany
If you contact us by email via our website, your enquiry is stored and organised in the ticketing system. This enables us to process your request chronologically and improve the service experience. Using the individually assigned ticket number, you can check the current status of your request at any time.
For the organisation and processing of your enquiry, we process personal data according to the scope of the information you provide. This always includes your surname, first name and email address. This data is transmitted to the provider, stored there and accessed.
Pursuant to Art. 6(1)(f) GDPR, processing is based on our legitimate interest in organising our customer service efficiently, responding to your request as quickly as possible and optimising our service offering.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorised disclosure to third parties.

4.3 Contact via WhatsApp Business

Visitors to our website can contact us using the WhatsApp messaging service. The service provider is:
WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
We use the business version of WhatsApp for this purpose.
If you contact us via WhatsApp in connection with a specific transaction, such as an order already placed, we store and use the mobile phone number you use for WhatsApp and, where provided by you, your first and last name. Processing is carried out pursuant to Art. 6(1)(b) GDPR so that we can process and respond to your request. On the same legal basis, we may ask you via WhatsApp for additional information such as your order number, customer number, address or email address, provided this is necessary to assign your enquiry to a specific transaction.
If, on the other hand, you use WhatsApp for general questions, for example about our services, availability or our website, we process your mobile phone number and, where provided by you, your first and last name pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the information you request efficiently and promptly.
We use the data collected via WhatsApp solely to respond to your request. It is not disclosed to third parties.
Please note that WhatsApp Business may access the address book of the mobile device we use for this purpose. The telephone numbers stored there are automatically transmitted to a server of the parent company Meta Platforms Inc. in the USA. For our WhatsApp Business account, we use a mobile device whose address book contains exclusively the WhatsApp contact details of people who have previously contacted us themselves via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their own device and accepting the WhatsApp terms of use pursuant to Art. 6(1)(a) GDPR, to the transmission of their WhatsApp telephone number from the address books of their chat contacts. Telephone numbers of people who do not use WhatsApp and/or have not contacted us via WhatsApp are therefore not transmitted.
Information on the purpose and scope of data collection, the further processing and use of data by WhatsApp, and your rights and settings options for protecting your privacy can be found in WhatsApp’s privacy policy:
https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the processing described above, personal data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

4.4 General Contact Enquiries

If you contact us, for example via a contact form or by email, we process personal data solely to handle and respond to your request. Processing is limited to the extent necessary for this purpose.
The legal basis, pursuant to Art. 6(1)(f) GDPR, is our legitimate interest in responding to your enquiry. If your contact relates to the conclusion or performance of a contract, Art. 6(1)(b) GDPR also serves as a legal basis.
Your data will be deleted as soon as the circumstances indicate that the matter in question has been conclusively resolved and no statutory retention obligations prevent deletion.

5. Comment Function

If you use the comment function on our website, in addition to the content of your comment, we store and publish the time at which it was created and the commenter name you selected. Your IP address is also logged and stored.
The IP address is stored for security reasons. In particular, it is required in the event that a comment infringes the rights of third parties or unlawful content is published. We require your email address so that we can contact you if a third party objects to content published by you as unlawful.
Your data is stored on the basis of Art. 6(1)(b) and (f) GDPR. We reserve the right to remove comments if third parties object to them as unlawful.

6. Use of Customer Data for Direct Advertising

6.1 Registration for the Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Only your email address is required for sending the newsletter. Any further information is voluntary and may be used to address you personally.
We use the double opt-in procedure for newsletter registration. You will therefore only receive the newsletter after confirming your registration via a verification link sent to the email address you provided.
By activating this confirmation link, you consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address entered by your internet service provider (ISP), as well as the date and time of registration. This enables us to trace any possible misuse of your email address at a later date. The data collected during newsletter registration is used exclusively for this purpose.
You can unsubscribe from the newsletter at any time using the unsubscribe link provided in the newsletter or by sending an appropriate message to the controller named at the beginning of this Privacy Policy.
After you unsubscribe, your email address will be deleted from our newsletter mailing list without delay. This does not apply if you have expressly consented to further use of your data or if we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

6.2 Newsletter Distribution via Klaviyo

We use the following provider to distribute our email newsletters:
Klaviyo
225 Franklin St
Boston, MA 02110
USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provide when registering for the newsletter to Klaviyo pursuant to Art. 6(1)(f) GDPR. The provider sends the newsletter on our behalf.
Where you have expressly consented pursuant to Art. 6(1)(a) GDPR, Klaviyo also performs statistical analyses of the success of our newsletter campaigns. For this purpose, web beacons or tracking pixels are used in the emails sent. These may record opening rates and certain interactions with newsletter content. Device information such as the time of access, IP address, browser type and operating system is also collected and evaluated. This data is not combined with other data sets.
You may withdraw your consent to newsletter tracking at any time with effect for the future.
A data processing agreement has been concluded with the provider. This agreement protects the data of our website visitors and prohibits its disclosure to third parties.
For transfers of personal data to the USA, Klaviyo has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

6.3 Email Notifications Regarding Product Availability

For items that are temporarily unavailable, you can register to receive an email notification. As soon as the item you selected is available again, you will receive a one-time notification.
Only your email address is required to send this notification. Further information is voluntary and may be used to address you personally.
We also use the double opt-in procedure for this service. A notification will only be sent after you have confirmed your consent by clicking a verification link that we send to the email address provided.
By activating the confirmation link, you consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address entered by your internet service provider (ISP), as well as the date and time of registration, so that we can later trace any possible misuse of your email address. The data collected for the email notification service is used exclusively to notify you about product availability.
You may unsubscribe from product availability notifications at any time by sending a message to the controller named at the beginning of this Privacy Policy.
After you unsubscribe, your email address will be removed from the mailing list created for this purpose without delay. This does not apply if you have expressly consented to further use of your data or if we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this policy.

6.4 Email Reminders for Incomplete Shopping Carts

If you abandon your purchase before completing the order, you can request a one-time email reminder about the contents of your virtual shopping cart.
Only your email address is required to send the reminder. Further data may be provided voluntarily and may be used to address you personally.
The reminder is sent using the double opt-in procedure. It will therefore only be sent after you have confirmed your consent via a verification link sent to the email address provided.
By clicking the confirmation link, you consent pursuant to Art. 6(1)(a) GDPR to the processing of your personal data for the purpose of sending a shopping cart reminder. We also store the IP address entered by your internet service provider (ISP), as well as the date and time of registration. This allows us to trace any possible misuse of your email address at a later date. The data collected as part of the notification service is used exclusively for this purpose.
You may unsubscribe from shopping cart reminders at any time by sending an appropriate message to the controller named at the beginning of this Privacy Policy.
After you unsubscribe, your email address will be deleted from the mailing list created for this purpose without delay. This does not apply where you have expressly consented to further use of your data or where we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

6.5 Visitor Recovery by Exceed Solutions GmbH

• URL and referrer URL,
• times of page views and redirects,
• content-related information about the user session, such as products in the shopping cart, product prices, categories, delivery costs and the time of purchase,
• a session ID for identification.

Right to Withdraw Consent

7. Processing of Data for Order Fulfilment

7.1 General Information on Contract Processing

Where necessary for processing the contract, particularly for delivery and payment, we disclose the personal data we collect to the commissioned transport company and the responsible financial institution pursuant to Art. 6(1)(b) GDPR.
If, on the basis of a corresponding contract, we are obliged to provide updates for goods with digital elements or for digital products, we process the contact details provided when the order was placed, such as your name, address and email address. In this way, within the legally prescribed period, we inform you of upcoming updates in fulfilment of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. The notification is provided through an appropriate means of communication, for example by post or email.
Your contact details are processed for this purpose solely to inform you about updates that we are required to provide and only to the extent necessary for the respective notification.
We also work with the service providers listed below to fulfil your order. These service providers support us wholly or partially in fulfilling concluded contracts. Personal data is transmitted to these service providers only in accordance with the information set out below.

7.2 Amazon Fulfilment (FBA)

We use the following provider to process orders:
Amazon EU S.a. r.l.
38 avenue John F. Kennedy
L-1855 Luxembourg
Your name, address and, where applicable, other personal data are disclosed to the provider pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of processing your online order. Data is transmitted only to the extent necessary for the actual fulfilment of the order.

7.3 Transfer of Personal Data to Shipping Service Providers

DHL

We use the following transport service provider for shipping:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
If you expressly consented during the order process, we transmit your email address and/or telephone number to DHL before delivery pursuant to Art. 6(1)(a) GDPR. The data is used to arrange a delivery date or provide a delivery notification.
Without such consent, pursuant to Art. 6(1)(b) GDPR, we disclose only the recipient’s name and delivery address. Data is transmitted only to the extent necessary to deliver the goods. In this case, the provider cannot arrange a delivery date or notify you of the delivery in advance.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider directly.

DHL Express

We also use the following transport service provider for shipping:
DHL Express Germany GmbH
Heinrich-Brüning-Str. 5
53113 Bonn
Germany
If you expressly consented during the order process, we transmit your email address and/or telephone number to DHL Express pursuant to Art. 6(1)(a) GDPR. This takes place before delivery so that a delivery date can be arranged or the delivery can be announced.
If no consent has been given, pursuant to Art. 6(1)(b) GDPR, only the recipient’s name and delivery address are transmitted. Disclosure is limited to the data necessary for delivery of the goods. In this case, it is not possible to arrange a delivery date or provide a delivery notification in advance.
Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider.

FedEx

We also use the following transport service provider:
FedEx Express Germany GmbH
Langer Kornweg 34 k
65451 Kelsterbach
Germany
Your email address and/or telephone number will be transmitted to FedEx before delivery pursuant to Art. 6(1)(a) GDPR if you expressly consented during the order process. This data is disclosed to arrange a delivery date or provide a delivery notification.
Without your consent, pursuant to Art. 6(1)(b) GDPR, we transmit only the recipient’s name and delivery address for the purpose of delivery. Data is disclosed only to the extent necessary for delivery of the goods. In this case, FedEx cannot arrange a delivery date or provide a delivery notification in advance.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider directly.

TNT

We also use the following shipping service provider:
TNT Express GmbH
Haberstraße 2
53842 Troisdorf
Germany
If you expressly consented during the order process, we disclose your email address and/or telephone number to TNT before delivery pursuant to Art. 6(1)(a) GDPR. This enables the provider to arrange a delivery date with you or announce the delivery.
If you do not give your consent, pursuant to Art. 6(1)(b) GDPR, we transmit only the recipient’s name and delivery address. Data is disclosed solely to the extent necessary for delivery. In this case, it is not possible to arrange a delivery date or provide a delivery notification in advance.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

UPS

We also use the following transport service provider:
United Parcel Service Deutschland Inc. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
If you expressly consented during the order process, we disclose your email address and/or telephone number to UPS before delivery of the goods pursuant to Art. 6(1)(a) GDPR. The purpose of this transfer is to arrange a delivery date or announce the delivery.
Without such consent, pursuant to Art. 6(1)(b) GDPR, only the recipient’s name and delivery address are transmitted. Data is disclosed only to the extent necessary for delivery of the goods. In this case, UPS cannot arrange the delivery date or provide a delivery notification in advance.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or UPS.

Jumingo

We also use the following transport service provider:
Jumingo GmbH
Breslauer Platz 4
50668 Cologne
Germany
If you expressly consented during the order process, we transmit your email address and/or telephone number to Jumingo before delivery pursuant to Art. 6(1)(a) GDPR. This is done to arrange a delivery date or provide a delivery notification.
Without your consent, pursuant to Art. 6(1)(b) GDPR, we disclose only the recipient’s name and delivery address. Data is transmitted only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date or provide a delivery notification in advance.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider directly.

7.4 Use of Payment Service Providers

Amazon Pay

One or more online payment methods offered by the following provider are available on our website:
Amazon Payments Europe s.c.a.
38 avenue J.F. Kennedy
L-1855 Luxembourg
If you select a payment method under which you make an advance payment, such as payment by credit card, we transmit the payment data provided during the order process to the provider pursuant to Art. 6(1)(b) GDPR. This data includes, in particular, your name, address, bank and payment card information, currency and transaction number. Information about the contents of your order is also transmitted.
Data is disclosed exclusively for the purpose of processing the payment and only to the extent necessary for this purpose.

Apple Pay

If you select the “Apple Pay” payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed using the Apple Pay function of your device running iOS, watchOS or macOS. The payment card stored in Apple Pay is charged in the process.
Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorise a payment, you must enter a code previously set by you and verify your identity using your device’s “Face ID” or “Touch ID” function.
For payment processing, the information provided during the order process is transmitted to Apple in encrypted form together with the data relating to your order. Apple then encrypts this information again using a developer-specific key before forwarding it to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website through which the purchase was made can access the payment data.
Once payment has been successfully completed, Apple transmits your device account number and a dynamic security code relating to the individual transaction to the website on which the purchase was made in order to confirm the payment transaction.
Where personal data is processed as part of these transmissions, processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR.
Apple stores anonymised transaction data. This includes the approximate purchase amount, approximate date and time, and information as to whether the transaction was completed successfully. Due to anonymisation, it is completely impossible to associate this data with a particular person. Apple uses this anonymised data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on an iPhone or Apple Watch for a purchase that you started via Safari on a Mac, the Mac and the device used for authorisation communicate via an encrypted channel on Apple’s servers. Apple does not process or store this information in a format that enables you to be identified.
You can disable the use of Apple Pay on your Mac in your iPhone settings. To do this, open “Wallet & Apple Pay” and disable the “Allow Payments on Mac” option.
Further information about data protection in connection with Apple Pay can be found at:
https://support.apple.com/de-de/HT203027

PayPal

One or more online payment methods offered by the following provider may be used on this website:
PayPal (Europe) S.a.r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
If you select a payment method under which you make an advance payment, we transmit the payment data provided during the order process to PayPal pursuant to Art. 6(1)(b) GDPR. This data includes, in particular, your name, address, bank and payment card information, currency and transaction number. The provider also receives information about the contents of your order.
The data is disclosed exclusively for the purpose of processing the payment and only to the extent necessary for this purpose.
For payment methods under which we make an advance payment, you will also be asked during the order process to provide certain personal data. This may include your first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.
To safeguard our legitimate interest in assessing your ability to pay, we forward this data to PayPal for a credit check pursuant to Art. 6(1)(f) GDPR. On the basis of the personal data you provide and further information, such as your shopping cart, invoice amount, order history and previous payment experience, the provider checks whether the selected payment method can be offered in view of possible payment and/or default risks.
The credit report may contain score values, meaning probability values. Where such values are included in the result, they are based on a scientifically recognised mathematical and statistical procedure. Address data may be taken into account in the calculation, among other factors, but not exclusively.
You may object to this data processing at any time by notifying us or PayPal directly. Irrespective of this, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.

Stripe

One or more online payment methods offered by the following provider are available on our website:
Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Ireland
If you select a payment method under which you make an advance payment, for example by credit card, we transmit the payment data provided during the order process to Stripe pursuant to Art. 6(1)(b) GDPR. This includes, among other information, your name, address, bank and payment card details, currency and transaction number. Information about the contents of your order is also disclosed.
Data is transmitted exclusively for the purpose of processing the payment and only to the extent necessary for this purpose.
If you select a payment method under which Stripe makes an advance payment, such as purchase on account, payment by instalments or direct debit, you will also be asked to provide certain personal data during the order process. This may include your first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.
To safeguard our legitimate interest in determining our customers’ ability to pay, we disclose this data to Stripe for the purpose of a credit check pursuant to Art. 6(1)(f) GDPR. On the basis of the information you provide and other data, such as your shopping cart, invoice amount, order history and payment experience, the provider assesses whether the payment method you selected can be granted in view of possible payment and/or default risks.
The credit report may contain probability values, known as score values. Where these values are included in the result, they are based on a scientifically recognised mathematical and statistical procedure. Address data may be included in the calculation, among other factors, but not exclusively.
You may object to this processing at any time by sending a message to us or Stripe. Nevertheless, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.

7.5 Processing of Data When Exercising the Right of Withdrawal

If you exercise your statutory right of withdrawal, we process the personal data you submit in order to handle and document your withdrawal.
In particular, the following information may be processed:

• first and last name,
• email address,
• contract, order or customer number,
• information about the contract you are withdrawing from,
• date and time of your declaration of withdrawal,
• other information that you provide to us in connection with the withdrawal.

You may exercise your right of withdrawal using the electronic withdrawal function provided by law or, where this option is available, through your customer account. When submitting a declaration through your customer account, contract and customer data already stored may be transferred automatically so that the relevant contract can be identified.
Data processing serves to handle your withdrawal, send confirmation of receipt, process any refunds and fulfil statutory documentation and evidence obligations.
The legal bases are Art. 6(1)(b) GDPR for the performance of the contract or the implementation of pre-contractual measures, and Art. 6(1)(c) GDPR for compliance with legal obligations.
We store data processed in connection with a withdrawal only for as long as necessary to handle the withdrawal, carry out the further contractual processing and comply with statutory retention and evidence obligations.

8. Web Analytics Services

8.1 Google Analytics 4

On this website, we use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland
Google Analytics 4 enables us to analyse the use of our website.
When you visit our website, Google Analytics 4 sets cookies by default. These are small text files stored on your device that collect certain information. This information also includes your IP address. However, Google truncates the final digits of the IP address in order to prevent it from being directly associated with you.
The information collected is transmitted to Google servers and processed there. It may also be transferred to Google LLC, based in the USA.
Google processes the data on our behalf in order to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
The data collected using Google Analytics 4 is stored for two months and then deleted.
All processing operations described above, particularly the storage of cookies on your device, take place only if you have expressly given us your consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You may withdraw consent already given at any time with effect for the future. To do so, disable the service using the “Cookie Consent Tool” provided on our website.
We have concluded a data processing agreement with Google. This agreement ensures that the data of our website visitors is protected and prohibits unauthorised disclosure to third parties.
Further legal information about Google Analytics 4 can be found at:
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites

Demographic Characteristics

Google Analytics 4 uses the “demographic characteristics” feature. This allows statistics to be generated that provide information about the age, gender and interests of visitors to our website. These statistics are based on the analysis of advertising and information from third-party providers.
These analyses may be used to define target groups for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after a storage period of two months.

Google Signals

Google Signals may be used on our website as an extension of Google Analytics 4 in order to create cross-device reports.
If you have activated personalised advertising and linked your devices to your Google Account, Google may analyse your usage behaviour across devices and create data models, including models relating to cross-device conversions. This requires your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR.
We do not receive any personal data from Google, but only statistical analyses.
If you wish to stop cross-device analysis, you can disable the “Personalised advertising” function in your Google Account settings. Information on this can be found at:
https://support.google.com/ads/answer/2662922?hl=de
Further information about Google Signals is available at:
https://support.google.com/analytics/answer/7532985?hl=de

User IDs

Google Analytics 4 may also be extended on this website by the “User IDs” function.
If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created a user account on our website and logged in to this account on several devices, your activities, including conversions, may be analysed across devices.
For data transfers to the USA, Google has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

8.2 Microsoft Clarity

On this website, we use the web analytics service of the following provider:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
Using cookies and/or similar technologies, the service collects and stores pseudonymised visitor data. The technologies used may include tracking pixels, web beacons and algorithms for reading information about the device and browser.
The data processed includes technical information about the device used, such as the IP address and browser information. This data is used for the statistical analysis of user behaviour on our website and for the creation of pseudonymised usage profiles.
This makes it possible, among other things, to analyse movement patterns in the form of heat maps. These can show the duration of visits to pages and interactions with the content of our website, such as text entries, scrolling movements, clicks and mouse-overs.
Due to pseudonymisation, direct attribution to you is generally excluded. The data is not combined with personal data in plain text that has been collected about you by other means.
The processing described above, particularly the reading or storage of information on your device, takes place only if you have expressly consented pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by disabling Microsoft Clarity in the “Cookie Consent Tool” provided on our website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, Microsoft has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

9. Retargeting, Remarketing and Conversion Tracking

Facebook Pixel for Creating Custom Audiences

Within our online offering, we use the “Facebook Pixel” service provided by:
Meta Platforms Ireland Limited
4 Grand Canal Quare
Dublin 2
Ireland
The provider is also referred to below as “Facebook”.
If a user clicks on an advertisement placed by us on Facebook, Facebook Pixel adds a parameter to the URL of the linked page. After redirection, this parameter is stored in the user’s browser by a cookie set by our linked page itself.
On the one hand, this enables Facebook to determine visitors to our online offering as a target group for displaying Facebook advertisements, known as “Facebook Ads”. We therefore use the service to display our Facebook Ads specifically to Facebook users who have shown an interest in our online offering or who have certain characteristics. These characteristics may include, for example, interests in particular topics or products determined on the basis of websites visited and transmitted by us to Facebook. These target groups are referred to as “Custom Audiences”.
On the other hand, Facebook Pixel can record whether users were redirected to our website after clicking on a Facebook advertisement and what actions they perform there. This is known as “conversion tracking”.
The data collected is anonymous to us and does not allow us to draw any conclusions about the identity of individual users. However, Facebook stores and processes the data in such a way that it can be linked to the respective user profile. Facebook may therefore also use this information for its own advertising purposes.
All processing described above, particularly the setting of cookies for reading information on the device used, takes place only if you have expressly consented pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. To do so, disable the service in the “Cookie Consent Tool” provided on our website.
We have concluded a data processing agreement with the provider. This agreement protects the data of our website visitors and prohibits unauthorised disclosure to third parties.
The information generated by Facebook is generally transmitted to and stored on a Facebook server. This may also involve transmission to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

10. Functions of Our Website

Google Web Fonts

For the uniform display of fonts, this website uses web fonts provided by:
Google Ireland Limited
Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland
When a page is accessed, your browser loads the required web fonts into its browser cache so that texts and fonts can be displayed correctly. For this purpose, your browser establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to Google.
Data may also be transferred to Google LLC in the USA.
Personal data is processed in connection with the font provider only if you have expressly given us your consent in advance pursuant to Art. 6(1)(a) GDPR.
You may withdraw consent already given at any time with effect for the future by disabling Google Web Fonts using the “Cookie Consent Tool” available on our website.
If your browser does not support web fonts, a standard font installed on your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this is intended to ensure compliance with the European level of data protection.

11. Other Tools

Cookie Consent Tool

We use a “Cookie Consent Tool” on this website. Its purpose is to obtain valid consent for cookies and cookie-based applications whose use requires consent.
When the website is accessed, the tool is displayed as an interactive user interface. By ticking boxes, you can decide which cookies and/or cookie-based applications you consent to.
Use of the tool ensures that cookies and services requiring consent are loaded only after the respective user has granted the corresponding consent. This means that such cookies are stored on the respective device only where consent has been given.
The Cookie Consent Tool sets technically necessary cookies so that your selected cookie settings can be stored. As a rule, no personal user data is processed in this process.
If, in an individual case, personal data such as your IP address is nevertheless processed for the purpose of storing, assigning or documenting your cookie settings, this is done pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in the lawful design of our online presence.
An additional legal basis is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to use technically non-essential cookies only with the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider. This agreement ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further information about the operator of the Cookie Consent Tool and the available settings can be found directly in the corresponding user interface on our website.

12. Rights of Data Subjects

12.1 Rights of Access and Intervention

Under applicable data protection law, you have the rights listed below vis-à-vis the controller with regard to the processing of your personal data. The legal basis specified applies to the respective conditions for exercising each right:

• right of access pursuant to Art. 15 GDPR,
• right to rectification pursuant to Art. 16 GDPR,
• right to erasure pursuant to Art. 17 GDPR,
• right to restriction of processing pursuant to Art. 18 GDPR,
• right to be informed pursuant to Art. 19 GDPR,
• right to data portability pursuant to Art. 20 GDPR,
• right to withdraw consent granted pursuant to Art. 7(3) GDPR,
• right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU MAY OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE, PROVIDED THAT THE REASONS FOR YOUR OBJECTION ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY TAKE PLACE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. THE OBJECTION MAY BE EXERCISED IN THE MANNER DESCRIBED ABOVE.
AFTER YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13. Storage Period for Personal Data

The period for which personal data is stored is determined by the applicable legal basis, the purpose of the processing and, where relevant, the applicable statutory retention periods, such as retention obligations under commercial and tax law.
Where we process personal data on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we store this data until you withdraw your consent.
Where statutory retention periods apply to data processed within the scope of contractual or similar obligations on the basis of Art. 6(1)(b) GDPR, the data is routinely deleted after these periods expire. This is subject to the condition that the data is no longer required for the performance or initiation of the contract and that we have no legitimate interest in continued storage.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, we store this data until you exercise your right to object pursuant to Art. 21(1) GDPR. Further storage remains possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it remains stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless the other information in this Privacy Policy provides otherwise for specific processing activities, stored personal data is deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.

14. Use of Artificial Intelligence (AI)

• processing and prioritising customer enquiries,
• analysing user behaviour on our website,
• optimising our products, services and communications.