Privacy Policy

––––––––––––––––––––
Privacy Policy
––––––––––––––––––––


1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data means all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is LB24 International GmbH, Jathostrasse 11a, 30163 Hanover, Germany, Tel.:0511 87989379, email: info@luxusbetten24.de. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

2) Data collection when visiting our website
When you use our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our website visited
- Date and time of access
- Amount of data transmitted in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned services provided by Shopify, data may also be transferred, as part of further processing on our behalf, to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event that data is transferred to Shopify Inc. in Canada, the adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on data protection at Shopify can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those of Shopify mentioned above only takes place within the scope communicated below.

4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use what are known as cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and make it possible to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.
In some cases, cookies serve to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the event that consent has been given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
Please note that you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be requested by sending a message to the controller's address stated above. We store and use the data you provide for contract processing. After the contract has been fully performed or your customer account has been deleted, your data will be restricted with due regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use data as permitted by law.

7) Comment function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you selected will also be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is carried out for security reasons and in the event that the person concerned infringes the rights of third parties or posts unlawful content by submitting a comment. We require your email address in order to contact you if a third party should object to your published content as unlawful. The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

8) Use of customer data for direct advertising
Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and is used so that we can address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm, by clicking an appropriate link, that you wish to receive the newsletter in the future.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later point in time. The data collected by us when registering for the newsletter is used exclusively for advertising communication by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

9) Data processing for order handling
9.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing your order (name, address, email address) in order to personally inform you, within the scope of our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR, via an appropriate communication channel (for example by post or by email) about upcoming updates within the legally prescribed period. Your contact data is used strictly for the specific purpose of notifications about updates owed by us and is processed by us for this purpose only insofar as this is necessary for the respective information.
For the processing of your order, we also work together with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
9.2 Disclosure of personal data to shipping service providers
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will pass on your email address to DHL prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or announcing the delivery, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the recipient's name and the delivery address to DHL in accordance with Art. 6(1)(b) GDPR. The transfer only takes place insofar as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery announcement is not possible.
Consent may be revoked at any time with future effect vis-à-vis the controller named above or vis-à-vis the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will pass on your email address and your telephone number to DPD prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or announcing the delivery, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the recipient's name and the delivery address to DPD in accordance with Art. 6(1)(b) GDPR. The transfer only takes place insofar as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or the delivery announcement is not possible.
Consent may be revoked at any time with future effect vis-à-vis the controller named above or vis-à-vis the transport service provider DPD.
9.3 Use of payment service providers (payment services)
- Amazon Pay
If the payment method "Amazon Pay" is selected, payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: “Amazon Payments”), to whom we transmit the information you provided during the ordering process together with the information about your order in accordance with Art. 6(1)(b) GDPR. Your data is transferred exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies are set when using Amazon Pay, i.e. small text files that are stored on your end device, this is done exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR. This consent can be revoked at any time via the “cookie consent tool” implemented on the website. Further information on the data protection provisions of Amazon Payments can be found at the following internet address: https://pay.amazon.com/de/help/201751600
- Apple Pay
If you choose the “Apple Pay” payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function of your end device operated with iOS, watchOS, or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, it is therefore necessary to enter a code previously defined by you and verify it using the “Face ID” or “Touch ID” function of your end device.
For the purpose of payment processing, the information you provide during the ordering process, together with the information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for the purpose of carrying out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the original website to confirm the success of the payment.
If personal data is processed in the course of the described transfers, the processing is carried out exclusively for the purpose of payment handling in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and information on whether the transaction was completed successfully. Anonymization completely rules out any personal reference. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase that you made via Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can be used to identify you personally. You can disable the option to use Apple Pay on your Mac in the settings on your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
Further information on data protection for Apple Pay can be found at the following Internet address: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the “Google Pay” payment method of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the “Google Pay” application on your mobile device operated with at least Android 4.4 (“KitKat”) and equipped with an NFC function by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment via Google Pay exceeding €25.00, your mobile device must first be unlocked using the verification method set up in each case (such as facial recognition, password, fingerprint, or pattern).
For the purpose of payment handling, the information you provide during the order process, together with the information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a uniquely assigned transaction number, which is used to verify that payment has been made. This transaction number does not contain any information about the actual payment data of the payment methods stored with Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google acts merely as an intermediary for handling the payment process. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored with Google Pay.
If personal data is processed in the course of the described transfers, the processing is carried out exclusively for the purpose of payment handling in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos that you have attached to the transaction, the name and email address of the seller and buyer or of the sender and recipient, the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data, and the optimisation and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with further information collected and stored by Google when using other Google services.
The Google Pay Terms of Use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- giropay
If payment is made via “giropay”, payment processing is carried out via giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to which we transmit the information you provided during the ordering process together with the information about your order. Your data is transmitted in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. You can find further information on giropay GmbH's privacy policy at the following internet address: https://www.giropay.de/rechtliches/datenschutzerklaerung
- Klarna
If a Klarna payment service is selected, payment processing is carried out via Klarna Bank AB (publ), https://klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as “Klarna”). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, items, delivery method) are transmitted to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this during the ordering process in accordance with Art. 6 para. 1 lit. a GDPR. You can view here which credit agencies your data may be transmitted to:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things but not exclusively, are included in the calculation of the score values. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship.
You may withdraw your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
Your personal data will be processed in accordance with the applicable data protection regulations and in line with the information provided in Klarna's Privacy Policy for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects residing in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
processed.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered - “Purchase on Account” or “Installment Payment” via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of payment processing. The transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or – if offered - “Purchase on Account” or “Installment Payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. Further information under data protection law, including information on the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may nevertheless remain entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
- SOFORT
If the payment method “SOFORT” is selected, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transmit the information you provided during the ordering process together with the information about your order in accordance with Art. 6 (1) lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information about SOFORT’s privacy policy can be found at the following internet address: https://www.klarna.com/sofort/datenschutz
- Stripe
If you choose a payment method from the payment service provider Stripe, payment processing will be carried out via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we transmit the information you provide during the ordering process together with the information about your order (name, address, account number, bank code, where applicable credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Further information on data protection at Stripe can be found at the URL https://stripe.com/de/privacy#translation.
Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to protect the legitimate interest in determining the user's ability to pay. Stripe may transmit the personal data necessary for a credit check and received in the course of payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values. Stripe uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the user's authorization to use the selected payment method.
You may object to this processing of your data at any time by sending a message to Stripe or to the credit agencies commissioned.
However, Stripe may still remain entitled to process your personal data where this is necessary for payment processing in accordance with the contract.

10) Use of rating and certification seal graphics
Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website in order to display our Trusted Shops quality seal and to offer Trusted Shops membership to buyers after an order.
This serves to safeguard our overriding legitimate interests in the optimal marketing of our offering within the framework of a balancing of interests, Art. 6 para. 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which documents the access and contains, for example, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data). This access data is not analyzed and is automatically overwritten no later than seven days after the end of your visit to the website.
Further personal data will only be transferred to Trusted Shops if, after completing an order, you decide to use Trusted Shops products or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops shall apply.

11) Web analytics services

Personalized advertising with Google

We use services from Google Ireland Limited (“Google”) on our website to show you personalized advertising and to measure the effectiveness of our advertising activities. For this purpose, Google uses various cookies and similar technologies to analyze your usage and browsing behavior and to tailor advertising to your interests.

Google processes, in particular, the following for this purpose:

  • your IP address,

  • Browser and device characteristics,

  • visited pages, interactions and, where applicable, further usage data.

Provided that you have given your consent, this data is used to assign users to certain target groups by means of so-called remarketing functions and to display tailored advertising messages to them in the Google advertising network (e.g. Google Search, YouTube, Gmail). Under certain circumstances, Google may also use the interests collected on one device across devices, provided that you are logged into your Google account.

Legal basis:
The processing and analysis of your data in the context of personalized advertising are carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. You may withdraw your consent at any time with effect for the future or adjust your settings via our cookie banner.

Google transmission and transfer to third countries:
The information generated through the use of these services may be transferred to Google servers in the USA and stored there. Google is certified under the “EU-US Data Privacy Framework” and undertakes to comply with European data protection standards.

Personalization options and objection:
You can permanently disable the collection of your data by Google for personalized advertising by turning off personalization at the following link:
https://adssettings.google.com/

Further information on data processing by Google and your settings options can be found here:
https://policies.google.com/technologies/ads?hl=de

 

11.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files stored on your end device and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transmitted to a Google server and stored there; in this context, data may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and excludes direct personal identification. By means of the extension, your IP address is truncated by Google in advance within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google LLC. in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide us with further services related to website use and internet use. The IP address transmitted by your browser within the scope of Google (Universal) Analytics is not merged with other data held by Google.
In addition, Google Analytics makes it possible, through a special function, the so-called “demographic characteristics”, to compile statistics containing statements about the age, gender, and interests of website visitors on the basis of an analysis of interest-based advertising and with the inclusion of third-party information. This allows the definition and differentiation of website user groups for the purpose of target-group-optimized alignment of marketing measures. However, data records collected via the “demographic characteristics” cannot be assigned to a specific person.
Details on the processing operations initiated by Google Analytics and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing operations described above, in particular the setting of Google Analytics cookies for reading information on the end device used, are carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Analytics will not be used during your visit to the website.
You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, under which Google is obliged to protect the data of visitors to our pages and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
11.2 Hotjar (hotjar Ltd.)
This website uses the Hotjar web analytics service of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
This tool can be used to track movements on the websites on which Hotjar is used (so-called heatmaps). For example, it is possible to see how far users scroll and which buttons users click and how often. Furthermore, with the help of the tool it is also possible to obtain feedback directly from the website users. In this way, we gain valuable information in order to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of our legitimate interests for optimization and marketing purposes and the interest-based design of our website in accordance with Art. 6 para. 1 lit. f GDPR.We pay particular attention to the protection of your personal data when using this tool. Thus, we can only trace which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties is displayed are automatically hidden by Hotjar and are therefore not traceable at any time.
Hotjar offers every user the option of preventing the use of the Hotjar tool by means of a “Do Not Track header”, so that no data about visits to the respective website is recorded. This is a setting that is supported by all common browsers in their current versions. For this purpose, your browser sends a request to Hotjar indicating that tracking of the respective user should be deactivated. If you use our website with different browsers/computers, you must configure the “Do Not Track header” separately for each of these browsers/computers.
Detailed instructions with information about your browser can be found at: https://www.hotjar.com/opt-out
Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your granted consent at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above.

12) Retargeting/ Remarketing/ Referral Advertising
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing; in this way, we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Any further data processing only takes place if you have agreed with Google that your internet and app browsing history may be linked by Google to your Google account and that information from your Google account may be used to personalize ads that you view on the web. If, in this case, you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form audiences. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the USA.
Details on the processing operations triggered by Google Ads Remarketing and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in provided by Google at the following link:
https://www.google.com/settings/ads/onweb/
You can view further information and the privacy policy regarding advertising and Google here:
https://www.google.com/policies/technologies/ads/
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, deactivate this service in the "Cookie Consent Tool" provided on the website or, alternatively, follow the option described above for submitting an objection.
Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a Pin on Pinterest, we place a cookie on your computer that interacts with a likewise implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your end device. These cookies expire after 180 days and are not used for personal identification.
If the user is redirected from a Pin on Pinterest to pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest Tag, by which certain information about the action (including the type of action, time, browser type of the end device) is transmitted.
Through this transmission, Pinterest can create statistics about usage behavior on our website after redirection from a Pinterest Pin, which help us optimize our offering.
If personal user data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product advertisements on Pinterest and of users' purchasing behavior, and thus serves to optimize our online offering.
However, we do not receive any information that could be used to personally identify users.
If you do not wish to participate in tracking, you can object by disabling the Pinterest Tag conversion tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU at http://www.youronlinechoices.com/de/praferenzmanagement/
check whether Microsoft advertising cookies are being set in your browser and disable them.
At the internet address below, you can obtain further information about Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your granted consent at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above.

13) Tools and Miscellaneous
Google reCAPTCHA
We also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on this website. This function primarily serves to distinguish whether an entry is made by a natural person or abusively through machine and automated processing. The service includes the transmission of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and preventing misuse and spam. In the course of using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.
Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your granted consent at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above.

14) Rights of the data subject
14.1 The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the stated legal basis for the respective requirements for exercising these rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw granted consents pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of the storage of personal data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws their consent.
If statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided it is no longer required for contract performance or contract initiation and/or we no longer have a legitimate interest in further storage.
When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Represented by the IT Law Firm