General information

The fol­low­ing inform­a­tion provide a simple over­view of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data that can be used to identi­fy you per­son­ally. For detailed inform­a­tion on the sub­ject of data pro­tec­tion, please refer to our data pro­tec­tion declar­a­tion lis­ted below.

Data collection on this website

Who is responsible for data collection on this website?

Data pro­cessing on this web­site is car­ried out by the web­site oper­at­or. You can find their con­tact details in the ‘Inform­a­tion on the con­trol­ler’ sec­tion of this pri­vacy policy.

How do we collect your data?

Your data is col­lec­ted when you provide it to us. This may, for example, be data that you enter in a con­tact form.

Oth­er data is col­lec­ted auto­mat­ic­ally or with your con­sent by our IT sys­tems when you vis­it the web­site. This is primar­ily tech­nic­al data (e.g. inter­net browser, oper­at­ing sys­tem or time of page view). This data is col­lec­ted auto­mat­ic­ally as soon as you enter this web­site.

What do we use your data for?

Some of the data is col­lec­ted to ensure that the web­site is provided without errors. Oth­er data may be used to ana­lyse your user beha­viour and to per­son­al­ise advertising.

What rights do you have regarding your data?

You have the right to receive inform­a­tion about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data free of charge at any time. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to data pro­cessing, you can revoke this con­sent at any time for the future. You also have the right to request the restric­tion of the pro­cessing of your per­son­al data under cer­tain cir­cum­stances. You also have the right to lodge a com­plaint with the com­pet­ent super­vis­ory authority.

You can con­tact us at any time if you have any fur­ther ques­tions on the sub­ject of data protection.

Analysis tools and tools from third-party providers

When you vis­it this web­site, your surf­ing beha­viour may be stat­ist­ic­ally eval­u­ated. This is primar­ily done using so-called ana­lys­is programmes.

Detailed inform­a­tion on these ana­lys­is pro­grammes can be found in the fol­low­ing pri­vacy policy.

We host the con­tent of our web­site with the fol­low­ing provider:

Hetzner

Pro­vider is “Het­zn­er Online GmbH”, Indus­triestr. 25, 91710 Gun­zen­hausen (fol­low­ing Hetzner).

Details can be found in Hetzner’s pri­vacy policy:
https://www.hetzner.com/legal/privacy-policy.

The use of Het­zn­er is based on Art. 6 para. 1 lit. f GDPR. We have a legit­im­ate interest in dis­play­ing our web­site as reli­ably as pos­sible. If a cor­res­pond­ing con­sent has been reques­ted, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to inform­a­tion in the user’s ter­min­al device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

Order Processing

We have con­cluded a data pro­cessing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract pre­scribed by data pro­tec­tion law, which guar­an­tees that it pro­cesses the per­son­al data of our web­site vis­it­ors only in accord­ance with our instruc­tions and in com­pli­ance with the GDPR.

Data Protection

The oper­at­ors of these pages take the pro­tec­tion of your per­son­al data very ser­i­ously. We treat your per­son­al data con­fid­en­tially and in accord­ance with the stat­utory data pro­tec­tion reg­u­la­tions and this pri­vacy policy.

When you use this web­site, vari­ous per­son­al data is col­lec­ted. Per­son­al data is data that can be used to identi­fy you per­son­ally. This pri­vacy policy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done.

We would like to point out that data trans­mis­sion over the Inter­net (e.g. when com­mu­nic­at­ing by email) may be sub­ject to secur­ity vul­ner­ab­il­it­ies. Com­plete pro­tec­tion of data against access by third parties is not possible.

Information on the responsible organisation

The con­trol­ler respons­ible for data pro­cessing on this web­site is

Peer­ox GmbH
Tuebinger Str. 10
01189 Dresden, Germany

Tele­fon: +49 351 41881180
E‑Mail:

The con­trol­ler is the nat­ur­al or leg­al per­son who alone or jointly with oth­ers determ­ines the pur­poses and means of the pro­cessing of per­son­al data (e.g. names, email addresses, etc.).

Data storage period

Unless a more spe­cif­ic stor­age peri­od has been spe­cified in this pri­vacy policy, your per­son­al data will remain with us until the pur­pose for data pro­cessing no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cessing, your data will be deleted unless we have oth­er leg­ally per­miss­ible reas­ons for stor­ing your per­son­al data (e.g. reten­tion peri­ods under tax or com­mer­cial law); in the lat­ter case, the dele­tion will take place after these reas­ons no longer apply.

General information on the legal basis for data processing on this website

If you have con­sen­ted to data pro­cessing, we pro­cess your per­son­al data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, inso­far as spe­cial cat­egor­ies of data are pro­cessed in accord­ance with Art. 9 para. 1 GDPR. In the event of express con­sent to the trans­fer of per­son­al data to third coun­tries, data pro­cessing is also car­ried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sen­ted to the stor­age of cook­ies or access to inform­a­tion in your end device (e.g. via device fin­ger­print­ing), the data pro­cessing is also car­ried out on the basis of Sec­tion 25 (1) TDDDG. Con­sent can be revoked at any time. If your data is required for the ful­fil­ment of a con­tract or for the imple­ment­a­tion of pre-con­trac­tu­al meas­ures, we pro­cess your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­more, we pro­cess your data if this is neces­sary to ful­fil a leg­al oblig­a­tion on the basis of Art. 6 para. 1 lit. c GDPR. Data pro­cessing may also be car­ried out on the basis of our legit­im­ate interest in accord­ance with Art. 6 para. 1 lit. f GDPR. Inform­a­tion on the rel­ev­ant leg­al bases in each indi­vidu­al case is provided in the fol­low­ing para­graphs of this pri­vacy policy.

Note on the transfer of data to third countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

Among oth­er things, we use tools from com­pan­ies based in third coun­tries that are not secure under data pro­tec­tion law and US tools whose pro­viders are not cer­ti­fied under the EU-US Data Pri­vacy Frame­work (DPF). If these tools are act­ive, your per­son­al data may be trans­ferred to these coun­tries and pro­cessed there. We would like to point out that no level of data pro­tec­tion com­par­able to that in the EU can be guar­an­teed in third coun­tries that are unsafe under data pro­tec­tion law.

We would like to point out that the USA, as a safe third coun­try, gen­er­ally has a level of data pro­tec­tion com­par­able to that of the EU. Data trans­fer to the USA is there­fore per­mit­ted if the recip­i­ent is cer­ti­fied under the ‘EU-US Data Pri­vacy Frame­work’ (DPF) or has suit­able addi­tion­al guar­an­tees. Inform­a­tion on trans­fers to third coun­tries, includ­ing the data recip­i­ents, can be found in this pri­vacy policy.

Recipients of personal data

As part of our busi­ness activ­it­ies, we work togeth­er with vari­ous extern­al organ­isa­tions. In some cases, it is also neces­sary to trans­fer per­son­al data to these extern­al organ­isa­tions. We only pass on per­son­al data to extern­al bod­ies if this is neces­sary for the ful­fil­ment of a con­tract, if we are leg­ally obliged to do so (e.g. passing on data to tax author­it­ies), if we have a legit­im­ate interest in the trans­fer in accord­ance with Art. 6 para. 1 lit. f GDPR or if anoth­er leg­al basis per­mits the trans­fer of data. When using pro­cessors, we only pass on our cus­tom­ers’ per­son­al data on the basis of a val­id con­tract for order pro­cessing. In the case of joint pro­cessing, a joint pro­cessing agree­ment is concluded.

Revocation of your consent to data processing

Many data pro­cessing oper­a­tions are only pos­sible with your express con­sent. You can with­draw your con­sent at any time. The leg­al­ity of the data pro­cessing car­ried out until the revoc­a­tion remains unaf­fected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of viol­a­tions of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vis­ory author­ity, in par­tic­u­lar in the Mem­ber State of their habitu­al res­id­ence, place of work or place of the alleged viol­a­tion. The right to lodge a com­plaint is without pre­ju­dice to any oth­er admin­is­trat­ive or judi­cial remedies.

Right to data portability

You have the right to have data that we pro­cess auto­mat­ic­ally on the basis of your con­sent or in ful­fil­ment of a con­tract handed over to you or to a third party in a com­monly used, machine-read­able format. If you request the dir­ect trans­fer of the data to anoth­er con­trol­ler, this will only take place if it is tech­nic­ally feasible.

Information, correction and deletion

With­in the frame­work of the applic­able leg­al pro­vi­sions, you have the right at any time to free inform­a­tion about your stored per­son­al data, its ori­gin and recip­i­ent and the pur­pose of the data pro­cessing and, if neces­sary, a right to cor­rec­tion or dele­tion of this data. You can con­tact us at any time if you have fur­ther ques­tions on the sub­ject of per­son­al data.

Right to restriction of processing

You have the right to request the restric­tion of the pro­cessing of your per­son­al data. You can con­tact us at any time to do this. The right to restric­tion of pro­cessing exists in the fol­low­ing cases:

• If you dis­pute the accur­acy of your per­son­al data stored by us, we gen­er­ally need time to veri­fy this. For the dur­a­tion of the review, you have the right to request that the pro­cessing of your per­son­al data be restricted.
• If the pro­cessing of your per­son­al data was/is unlaw­ful, you can request the restric­tion of data pro­cessing instead of erasure.
• If we no longer need your per­son­al data, but you need it for the exer­cise, defence or asser­tion of leg­al claims, you have the right to request the restric­tion of the pro­cessing of your per­son­al data instead of its erasure.
• If you have lodged an objec­tion in accord­ance with Art. 21 para. 1 GDPR, a bal­ance must be struck between your interests and ours. As long as it has not yet been determ­ined whose interests pre­vail, you have the right to request the restric­tion of the pro­cessing of your per­son­al data.

If you have restric­ted the pro­cessing of your per­son­al data, this data – apart from its stor­age – may only be pro­cessed with your con­sent or for the estab­lish­ment, exer­cise or defence of leg­al claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or leg­al per­son or for reas­ons of import­ant pub­lic interest of the European Uni­on or of a Mem­ber State.

SSL or TLS encryption

This site uses SSL or TLS encryp­tion for secur­ity reas­ons and to pro­tect the trans­mis­sion of con­fid­en­tial con­tent, such as orders or enquir­ies that you send to us as the site oper­at­or. You can recog­nise an encryp­ted con­nec­tion by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock sym­bol in your browser line.

If SSL or TLS encryp­tion is activ­ated, the data you trans­mit to us can­not be read by third parties.

Objection to advertising e‑mails

We hereby object to the use of con­tact data pub­lished in the con­text of the imprint oblig­a­tion and else­where on the web­site for send­ing unso­li­cited advert­ising and inform­a­tion mater­i­al. The oper­at­ors of the web­site expressly reserve the right to take leg­al action in the event of the unso­li­cited send­ing of advert­ising inform­a­tion, such as spam e‑mails.

If you have giv­en your con­sent, Google Ana­lyt­ics 4, a web ana­lyt­ics ser­vice provided by Google LLC, is used on this web­site. The con­trol­ler for users in the EU/EEA and Switzer­land is Google Ire­land Lim­ited, Google Build­ing Gor­don House, 4 Bar­row St, Dub­lin, D04 E5W5, Ire­land (‘Google’).

Type and purpose of processing

Google Ana­lyt­ics uses cook­ies that enable your use of our web­site to be ana­lysed. The inform­a­tion col­lec­ted by the cook­ies about your use of this web­site is usu­ally trans­ferred to a Google serv­er in the USA and stored there.

We use the User ID func­tion. With the help of the user ID, we can assign a unique, per­man­ent ID to one or more ses­sions (and the activ­it­ies with­in these ses­sions) and ana­lyse user beha­viour across devices.

We use Google Sig­nals. This allows Google Ana­lyt­ics to col­lect addi­tion­al inform­a­tion about users who have activ­ated per­son­al­ised ads (interests and demo­graph­ic data) and ads can be delivered to these users in cross-device remarket­ing campaigns.

In Google Ana­lyt­ics 4, the anonymisa­tion of IP addresses is activ­ated by default. Due to IP anonymisa­tion, your IP address will be trun­cated by Google with­in mem­ber states of the European Uni­on or in oth­er sig­nat­ory states to the Agree­ment on the European Eco­nom­ic Area. Only in excep­tion­al cases will the full IP address be trans­mit­ted to a Google serv­er in the USA and trun­cated there. Accord­ing to Google, the IP address trans­mit­ted by your browser as part of Google Ana­lyt­ics will not be merged with oth­er Google data.

Dur­ing your vis­it to the web­site, your user beha­viour is recor­ded in the form of ‘events’. Events can be

• Page views
• First vis­it to the website
• Start of the session
• Vis­ited web pages
• Your ‘click path’, inter­ac­tion with the website
• Scrolls (whenev­er a user scrolls to the end of the page (90%))
• Clicks on extern­al links
• Intern­al search queries
• Inter­ac­tion with videos
• file down­loads
• Ads viewed / clicked on
• lan­guage setting

Also recor­ded:

• Your approx­im­ate loc­a­tion (region)
• Date and time of your visit
• Your IP address (in abbre­vi­ated form)
• Tech­nic­al inform­a­tion about your browser and the end devices you use (e.g. lan­guage set­ting, screen resolution)
• Your inter­net provider
• the refer­rer URL (via which website/advertising medi­um you came to this website)

Pur­poses of the processing
On behalf of the oper­at­or of this web­site, Google will use this inform­a­tion to ana­lyse your use of the web­site and to com­pile reports on web­site activ­ity. The reports provided by Google Ana­lyt­ics are used to ana­lyse the per­form­ance of our web­site and the suc­cess of our mar­ket­ing campaigns.

Recip­i­ents
Recip­i­ents of the data are/may be

• Google Ire­land Lim­ited, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land (as pro­cessor pur­su­ant to Art. 28 GDPR)
• Google LLC, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA
• Alpha­bet Inc, 1600 Amphi­theatre Park­way Moun­tain View, CA 94043, USA

Third coun­try transfer
For the USA, the European Com­mis­sion adop­ted its adequacy decision on 10 July 2023. Google LLC is cer­ti­fied under the EU-US Pri­vacy Frame­work. Since Google serv­ers are dis­trib­uted world­wide and a trans­fer to third coun­tries (for example to Singa­pore) can­not be com­pletely ruled out, we have also con­cluded the EU stand­ard con­trac­tu­al clauses with the provider.

Stor­age period
The data sent by us and linked to cook­ies is auto­mat­ic­ally deleted after 14 months. The max­im­um lifespan of Google Ana­lyt­ics cook­ies is 2 years. Data whose reten­tion peri­od has been reached is auto­mat­ic­ally deleted once a month.

Leg­al basis
The leg­al basis for this data pro­cessing is your con­sent in accord­ance with Art. 6 para. 1 sen­tence 1 lit. a GDPR and § 25 para. 1 sen­tence 1 TTDSG.

Revoc­a­tion
You can revoke your con­sent at any time with effect for the future by access­ing the cook­ie set­tings and chan­ging your selec­tion there (but­ton at the bot­tom left of the screen).This does not affect the law­ful­ness of the pro­cessing car­ried out on the basis of the con­sent until revocation.

You can also pre­vent the stor­age of cook­ies from the out­set by con­fig­ur­ing your browser soft­ware accord­ingly. How­ever, if you con­fig­ure your browser to reject all cook­ies, this may restrict the func­tion­al­ity of this and oth­er web­sites. You can also pre­vent Google from col­lect­ing the data gen­er­ated by the cook­ie and relat­ing to your use of the web­site (includ­ing your IP address) and from pro­cessing this data by Google by

1. Not giv­ing your con­sent to the set­ting of the cook­ie or
2. down­load­ing and installing the browser add-on to deac­tiv­ate Google Ana­lyt­ics HERE.

You can find more inform­a­tion on the terms of use of Google Ana­lyt­ics and on data pro­tec­tion at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=en.

Cookies

Our Inter­net pages use so-called ‘cook­ies’. Cook­ies are small data pack­ets and do not cause any dam­age to your end device. They are stored on your device either tem­por­ar­ily for the dur­a­tion of a ses­sion (ses­sion cook­ies) or per­man­ently (per­man­ent cook­ies). Ses­sion cook­ies are auto­mat­ic­ally deleted at the end of your vis­it. Per­man­ent cook­ies remain stored on your end device until you delete them your­self or they are auto­mat­ic­ally deleted by your web browser.

Cook­ies may ori­gin­ate from us (first-party cook­ies) or from third-party com­pan­ies (so-called third-party cook­ies). Third-party cook­ies enable the integ­ra­tion of cer­tain ser­vices from third-party com­pan­ies with­in web­sites (e.g. cook­ies for pro­cessing pay­ment services).

Cook­ies have vari­ous func­tions. Many cook­ies are tech­nic­ally neces­sary, as cer­tain web­site func­tions would not work without them (e.g. the shop­ping bas­ket func­tion or the dis­play of videos). Oth­er cook­ies can be used to ana­lyse user beha­viour or for advert­ising purposes.

Cook­ies that are required to carry out the elec­tron­ic com­mu­nic­a­tion pro­cess, to provide cer­tain func­tions that you have reques­ted (e.g. for the shop­ping bas­ket func­tion) or to optim­ise the web­site (e.g. cook­ies to meas­ure the web audi­ence) (neces­sary cook­ies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless anoth­er leg­al basis is spe­cified. The web­site oper­at­or has a legit­im­ate interest in the stor­age of neces­sary cook­ies for the tech­nic­ally error-free and optim­ised pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­par­able recog­ni­tion tech­no­lo­gies has been reques­ted, the pro­cessing is car­ried out exclus­ively on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); con­sent can be revoked at any time.

You can set your browser so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vidu­al cases, exclude the accept­ance of cook­ies for cer­tain cases or in gen­er­al and activ­ate the auto­mat­ic dele­tion of cook­ies when clos­ing the browser. If cook­ies are deac­tiv­ated, the func­tion­al­ity of this web­site may be restricted.

You can find out which cook­ies and ser­vices are used on this web­site in this pri­vacy policy.

Server log files

The pro­vider of the pages auto­mat­ic­ally col­lects and stores inform­a­tion in so-called serv­er log files, which your browser auto­mat­ic­ally trans­mits to us. These are

• Browser type and browser version
• Oper­at­ing sys­tem used
• Refer­rer URL
• Host name of the access­ing computer
• Time of the serv­er request
• IP address

This data is not merged with oth­er data sources.

This data is col­lec­ted on the basis of Art. 6 para. 1 lit. f GDPR. The web­site oper­at­or has a legit­im­ate interest in the tech­nic­ally error-free present­a­tion and optim­iz­a­tion of its web­site – for this pur­pose, the serv­er log files must be recorded.

Request by e‑mail, telephone or fax

If you con­tact us by e‑mail, tele­phone or fax, we will store and pro­cess your inquiry, includ­ing all per­son­al data (name, inquiry), for the pur­pose of pro­cessing your request. We will not pass on this data without your consent.

This data is pro­cessed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the ful­fill­ment of a con­tract or is neces­sary for the imple­ment­a­tion of pre-con­trac­tu­al meas­ures. In all oth­er cases, the pro­cessing is based on our legit­im­ate interest in the effect­ive pro­cessing of the inquir­ies addressed to us (Art. 6 para. 1 lit. f GDPR) or on your con­sent (Art. 6 para. 1 lit. a GDPR) if this has been reques­ted; con­sent can be revoked at any time.

The data you send to us via con­tact requests will remain with us until you ask us to delete it, revoke your con­sent to stor­age or the pur­pose for data stor­age no longer applies (e.g. after your request has been pro­cessed). Man­dat­ory stat­utory pro­vi­sions – in par­tic­u­lar stat­utory reten­tion peri­ods – remain unaffected.

Comment function on this website

For the com­ment func­tion on this page, in addi­tion to your com­ment, inform­a­tion about the time the com­ment was cre­ated, your e‑mail address and, if you are not post­ing anonym­ously, the user name you have chosen will be stored.

Storage of the IP address

Our com­ment func­tion stores the IP addresses of users who post com­ments. As we do not check com­ments on this web­site before they are activ­ated, we need this data in order to be able to take action against the author in the event of leg­al viol­a­tions such as insults or propaganda.

Subscribing to comments

As a user of the site, you can sub­scribe to com­ments after regis­ter­ing. You will receive a con­firm­a­tion e‑mail to check wheth­er you are the own­er of the e‑mail address provided. You can unsub­scribe from this func­tion at any time via a link in the info mails. In this case, the data entered when sub­scrib­ing to com­ments will be deleted; how­ever, if you have trans­mit­ted this data to us for oth­er pur­poses and else­where (e.g. news­let­ter sub­scrip­tion), this data will remain with us.

Storage duration of comments

The com­ments and the asso­ci­ated data are stored and remain on this web­site until the con­tent com­men­ted on has been com­pletely deleted or the com­ments have to be deleted for leg­al reas­ons (e.g. offens­ive comments).

Legal basis

The com­ments are stored on the basis of your con­sent (Art. 6 para. 1 lit. a GDPR). You can revoke your con­sent at any time. All you need to do is send us an inform­al email. The leg­al­ity of the data pro­cessing oper­a­tions already car­ried out remains unaf­fected by the revocation.

Newsletter data

If you would like to receive the news­let­ter offered on the web­site, we require an e‑mail address from you as well as inform­a­tion that allows us to veri­fy that you are the own­er of the e‑mail address provided and that you agree to receive the news­let­ter. No fur­ther data is col­lec­ted, or only on a vol­un­tary basis. We use this data exclus­ively for send­ing the reques­ted inform­a­tion and do not pass it on to third parties.

The data entered in the news­let­ter regis­tra­tion form is pro­cessed exclus­ively on the basis of your con­sent (Art. 6 para. 1 lit. a GDPR). You can revoke your con­sent to the stor­age of the data, the e‑mail address and its use for send­ing the news­let­ter at any time, for example via the “Unsub­scribe” link in the news­let­ter. The leg­al­ity of the data pro­cessing oper­a­tions that have already taken place remains unaf­fected by the revocation.

The data you provide us with for the pur­pose of sub­scrib­ing to the news­let­ter will be stored by us or the news­let­ter ser­vice pro­vider until you unsub­scribe from the news­let­ter and deleted from the news­let­ter dis­tri­bu­tion list after you unsub­scribe from the news­let­ter or after the pur­pose no longer applies. We reserve the right to delete or block e‑mail addresses from our news­let­ter dis­tri­bu­tion list at our own dis­cre­tion with­in the scope of our legit­im­ate interest in accord­ance with Art. 6 para. 1 lit. f GDPR.Daten, die zu ander­en Zweck­en bei uns gespeich­ert wur­den, bleiben hiervon unberührt.

After you unsub­scribe from the news­let­ter dis­tri­bu­tion list, your e‑mail address may be stored by us or the news­let­ter ser­vice pro­vider in a black­list if this is neces­sary to pre­vent future mail­ings. The data from the black­list will only be used for this pur­pose and will not be merged with oth­er data. This serves both your interest and our interest in com­ply­ing with the leg­al require­ments when send­ing news­let­ters (legit­im­ate interest with­in the mean­ing of Art. 6 para. 1 lit. f GDPR). Stor­age in the black­list is not lim­ited in time. You can object to the stor­age if your interests out­weigh our legit­im­ate interest.

Use of rapidmail

Descrip­tion and pur­pose: We use rap­id­mail to send newsletters.

The pro­vider is rap­id­mail GmbH, Wentzinger­straße 21, 79106 Freiburg, Germany.

Among oth­er things, rap­id­mail is used to organ­ize and ana­lyze the send­ing of news­let­ters. The data you enter for the pur­pose of sub­scrib­ing to the news­let­ter is stored on rapidmail’s serv­ers in Ger­many. If you do not wish to be ana­lyzed by rap­id­mail, you must unsub­scribe from the news­let­ter. For this pur­pose, we provide a cor­res­pond­ing link in every news­let­ter mes­sage. For the pur­pose of ana­lys­is, the emails sent with rap­id­mail con­tain a so-called track­ing pixel, which con­nects to the rap­id­mail serv­ers when the email is opened. In this way, it can be determ­ined wheth­er a news­let­ter mes­sage has been opened. We can also use rap­id­mail to determ­ine wheth­er and which links in the news­let­ter mes­sage have been clicked on. Option­ally, links in the email can be set as track­ing links with which your clicks can be counted.

Leg­al basis: The leg­al basis for data pro­cessing is Art. 6 para. 1 lit. a) GDPR.

Recip­i­ent: The recip­i­ent of the data is rap­id­mail GmbH.

Trans­fer to third coun­tries: Data is not trans­ferred to third countries.

Dur­a­tion: The data stored by us as part of your con­sent for the pur­pose of the news­let­ter will be stored by us until you unsub­scribe from the news­let­ter and deleted from both our serv­ers and the serv­ers of rap­id­mail after you unsub­scribe from the news­let­ter. Data stored by us for oth­er pur­poses (e.g. e‑mail addresses for the mem­ber area) remain unaf­fected by this.

Revoc­a­tion option: You have the option of with­draw­ing your con­sent to data pro­cessing at any time with effect for the future. The leg­al­ity of the data pro­cessing oper­a­tions that have already taken place remains unaf­fected by the revocation.

Fur­ther data pro­tec­tion inform­a­tion: For more inform­a­tion, please refer to rapidmail’s data secur­ity inform­a­tion at: https://www.rapidmail.de/datensicherheit. For more inform­a­tion on rapidmail’s ana­lys­is func­tions, please see the fol­low­ing link: https://www.rapidmail.de/wissen-und-hilfe

Sending newsletters to existing customers

If you order goods or ser­vices from us and provide us with your e‑mail address, this e‑mail address may sub­sequently be used by us to send you news­let­ters, provided we inform you of this in advance. In such a case, only dir­ect advert­ising for our own sim­il­ar goods or ser­vices will be sent via the news­let­ter. You can unsub­scribe from this news­let­ter at any time. There is a cor­res­pond­ing link in every news­let­ter for this pur­pose. In this case, the leg­al basis for send­ing the news­let­ter is Art. 6 para. 1 lit. f GDPR in con­junc­tion with Sec­tion 7 para. 3 UWG.

After you unsub­scribe from the news­let­ter dis­tri­bu­tion list, we may store your email address in a black­list to pre­vent future mail­ings to you. The data from the black­list will only be used for this pur­pose and will not be merged with oth­er data. This serves both your interest and our interest in com­ply­ing with the leg­al require­ments when send­ing news­let­ters (legit­im­ate interest with­in the mean­ing of Art. 6 para. 1 lit. f GDPR). Stor­age in the black­list is not lim­ited in time. You can object to the stor­age if your interests out­weigh our legit­im­ate interest.

Wordfence

We have integ­rated Word­fence on this web­site. The pro­vider is Defi­ant Inc, Defi­ant, Inc, 800 5^th Ave Ste 4100, Seattle, WA 98104, USA (here­in­after “Word­fence”).

Word­fence serves to pro­tect our web­site from unwanted access or mali­cious cyber­at­tacks. For this pur­pose, our web­site estab­lishes a per­man­ent con­nec­tion to Wordfence’s serv­ers so that Word­fence can com­pare its data­bases with the accesses made on our web­site and block them if necessary.

Word­fence is used on the basis of Art. 6 para. 1 lit. f GDPR. The web­site oper­at­or has a legit­im­ate interest in pro­tect­ing its web­site as effect­ively as pos­sible against cyber­at­tacks. If a cor­res­pond­ing con­sent has been reques­ted, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to inform­a­tion in the user’s ter­min­al device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stand­ard con­trac­tu­al clauses of the EU Com­mis­sion. You can find details here: https://www.wordfence.com/help/general-data-protection-regulation/.

Order processing

We have con­cluded a data pro­cessing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that it pro­cesses the per­son­al data of our web­site vis­it­ors only in accord­ance with our instruc­tions and in com­pli­ance with the GDPR.

Sources

• https://www.e‑recht24.de
• https://www.dr-datenschutz.de
• https://www.rapidmail.de