Datenschutz

PRIVACY

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

SERVER LOG FILES

You can visit our website without providing any information about yourself.

Whenever our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR, due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

CONTACT

Controller

If you wish to contact us, the controller responsible for data processing is:

LH Brands GmbH

Isaak-Newton-Straße 11

85055 Ingolstadt

Germany

Phone: 0841 13802844

Email: sales@lhbg.de

Customer-initiated contact by email

If you contact us by email on your own initiative, we collect your personal data (name, email address and message text) only to the extent provided by you. The data is processed for the purpose of handling and responding to your enquiry.

If the contact is made for the implementation of pre-contractual measures (e.g. advice where you are interested in purchasing or preparation of an offer) or relates to a contract already concluded between you and us, the processing is based on Art. 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address only to process your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address and message text) only to the extent provided by you. The data is processed for the purpose of contacting you.

We use your email address only to process your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

CUSTOMER ACCOUNT AND ORDERS

Customer account

When you open a customer account, we collect your personal data to the extent specified in the relevant form. The data is processed for the purpose of improving your shopping experience and simplifying order processing. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and handle your enquiries. The provision of data is necessary for entering into the contract. If you do not provide the data, no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers involved in order processing and IT service providers. In all cases, we strictly observe the statutory requirements. The amount of data transferred is limited to the minimum necessary.

REVIEWS AND ADVERTISING

Data collection when submitting a comment or review

When you comment on or review an item or post, we collect your personal data (name, email address and comment text) only to the extent provided by you. The processing enables comments and reviews to be submitted and displayed.

By submitting your comment or review, you consent to the processing of the data transmitted. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. Your personal data will then be deleted.

If your comment or review is published, only the name you have provided will be published.

Use of your email address for sending newsletters

Irrespective of contract processing, we use your email address exclusively for our own advertising purposes, namely to send newsletters, provided that you have expressly consented to this. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

For this purpose, your data is disclosed to an email marketing service provider acting as our processor. It is not disclosed to any other third parties.

Use of CleverReach

We use the services of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede, Germany; “CleverReach”) to send our newsletters under a data processing agreement.

We transfer to CleverReach the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name). The data is processed for the purpose of sending newsletters and statistically evaluating them.

To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel image (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any links it contains. Conversion tracking enables us to analyse, for example, whether a purchase was made after clicking a link in the newsletter or whether you registered on our website. In this context, we collect personal data such as your IP address, browser type and device, as well as the time of the interaction. Usage profiles may be created from this data under a pseudonym. The data collected is not used to identify you personally. It is used solely for statistical evaluation and to improve newsletter campaigns.

Processing of your personal data is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in operating a targeted, effective and user-friendly newsletter system. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Further information and CleverReach’s privacy policy can be found at:

https://www.cleverreach.com/de-de/datenschutz/

https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/

SHIPPING SERVICE PROVIDERS AND INVENTORY MANAGEMENT

Disclosure of your email address to shipping companies to provide shipping status updates

We disclose your email address to the transport company during contract processing if you have expressly consented to this during the ordering process. The disclosure is made so that the transport company can inform you by email about the shipping status. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Use of an external inventory management system

We use an inventory management system provided by a processor to handle contracts. For this purpose, the personal data collected in connection with your order is transferred to:

Pickware GmbH

Goebelstr. 21

64293 Darmstadt

Germany

Your personal data is processed for the purpose of performing the contract concluded with you and on the basis of Art. 6(1)(b) GDPR.

PAYMENT SERVICE PROVIDERS

Use of PayPal

We use the PayPal payment service on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data is processed so that we can offer you payment through this service. If you select and use PayPal as your payment method, the data required to process the payment is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing is based on Art. 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s privacy policy, which can be found at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data is processed so that we can offer you payment through this service. If you select and use PayPal, credit card via PayPal or direct debit via PayPal, the data required to process the payment is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing is based on Art. 6(1)(b) GDPR.

For certain payment methods, such as credit card via PayPal and direct debit via PayPal, PayPal reserves the right to obtain a credit report, where applicable, on the basis of mathematical and statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values), which are calculated on the basis of scientifically recognised mathematical and statistical procedures and which may include address data, among other things. Your legitimate interests are taken into account in accordance with statutory provisions. The data is processed for the purpose of checking creditworthiness in preparation for a contract. Processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting ourselves against payment defaults where PayPal makes advance payments.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data by PayPal based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of data is necessary to conclude the contract using the payment method you have requested. If you do not provide the data, the contract cannot be concluded using the payment method you selected.

Use of PayPal Express

We use the PayPal Express payment service on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data is processed so that we can offer you payment through PayPal Express. To integrate this payment service, PayPal must collect, store and analyse data when the website is accessed (e.g. IP address, device type, operating system, browser type and location of your device). Cookies may also be used for this purpose. Cookies enable your browser to be recognised.

Processing of your personal data is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in offering various payment methods in a customer-friendly manner. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

When you select and use PayPal Express, the data required to process the payment is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing is based on Art. 6(1)(b) GDPR. Further information about data processing when using PayPal Express can be found in the relevant privacy policy at:

http://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

COOKIES

Our website uses cookies. Cookies are small text files that are stored in your internet browser or by your internet browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide whether to accept them individually, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all the functions of this website to their full extent.

The following links provide information on how to manage (including disable) cookies in the most common browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in this privacy policy, we use only technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you move from one page to another and to offer you services. Some functions of our website cannot be provided without the use of cookies. These functions require the browser to be recognised again after a page change.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in ensuring the optimal functionality of the website and designing our services in a user-friendly and effective manner.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Use of Shopware’s Cookie Consent Manager

We use the Cookie Consent Manager provided by shopware AG (Ebbinghoff 10, 48624 Schöppingen, Germany; “Shopware”) on our website.

The tool enables you to give consent to data processing on the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data is processed for the purpose of obtaining and documenting the consent required for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopware. This data is not disclosed to any other third parties.

The data is processed to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.

Further information about data protection at Shopware can be found at:

https://www.shopware.com/de/datenschutz/

ANALYTICS AND ADVERTISING TRACKING

Use of Google Analytics 4

We use the Google Analytics web analytics service on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

The data is processed to analyse this website and its visitors and for marketing and advertising purposes. Google uses the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet usage.

The following information may be collected, among other things: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data and purchasing activity. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices and all other data Google has about you.

We shorten your IP address beforehand on our own servers. Google therefore receives only pseudonymised data.

Google uses technologies such as cookies, browser storage and tracking pixels that enable analysis of your use of the website. The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1), first sentence, TDDDG in conjunction with Art. 6(1)(a) GDPR.

Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

We also use Google Signals in this context. Google Signals enables cross-device tracking. Your data may therefore be analysed across devices if you have enabled “personalised advertising” in your account settings and your devices are linked to your Google account. This makes it possible to recognise the device on which you search for products and that you later return to complete purchases on another device, such as a tablet.

The cross-device reports created in this context contain only aggregated data. We therefore receive only statistics generated on the basis of Google Signals. To prevent data from being collected and stored across devices by Google Signals, you can disable the “personalised ads” function in your Google account settings. Further information can be found at:

https://support.google.com/ads/answer/2662922?hl=de

Further information about data processing and privacy in connection with Google Signals can be found at:

https://support.google.com/analytics/answer/7532985?hl=de

The information generated about your use of this website is generally transferred to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.

Further information about the terms of use and data protection can be found at:

https://policies.google.com/technologies/partner-sites

https://policies.google.com/privacy?hl=de&gl=de

Use of the Meta Pixel

We use the Meta Pixel on our website, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”).

Meta and we are joint controllers for the collection of your data and its transmission to Meta when this service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at:

https://de-de.facebook.com/legal/terms/businesstools

Under this agreement, we are particularly responsible for fulfilling the information obligations under Arts. 13 and 14 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights under Arts. 15–20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach affects Meta’s obligations under the joint processing agreement.

The application is used to target website visitors with interest-based advertising on the Facebook and Instagram social networks. For this purpose, Meta’s remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to Meta’s servers. This transmits information to the Meta server about which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you will then be shown personalised, interest-based ads.

The application is also used to create conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as which actions were performed after being redirected to this website. However, we do not receive any information that can personally identify users.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

You can deactivate the “Custom Audiences” remarketing function here. Further information about the collection and use of data by Meta, your related rights and options for protecting your privacy can be found in Meta’s privacy information at:

https://www.facebook.com/about/privacy/

Use of Google Ads conversion tracking

We use the online advertising programme “Google Ads” on our website and, in this context, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain personal data and are therefore not used for personal identification. If you visit certain pages of our website while the cookie has not expired, Google and we can recognise that you clicked on the advertisement and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible to track cookies across the websites of Ads customers.

The information collected with the help of the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that can personally identify users.

Your data may be transferred to Google LLC servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1), first sentence, TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Further information and Google’s privacy policy can be found at:

https://www.google.de/policies/privacy/

Use of Google’s remarketing or “similar audiences” function

We use the remarketing or “similar audiences” function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The application is used to analyse visitor behaviour and interests. To analyse website usage, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record visits to the website and anonymised data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you may be shown advertisements that are highly likely to take into account product and information areas you previously viewed.

Further information about Google Remarketing and the related privacy policy can be found at:

https://www.google.com/privacy/ads/

Use of TikTok Pixel

We use the TikTok Pixel on our website, provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”). Both companies are joint controllers for data processing (hereinafter “TikTok”).

The data is processed to identify and analyse visits to our website by our customers, to address customers more effectively by displaying targeted advertisements, and to evaluate the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognised. The following information may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution and IP address. TikTok may assign this information to your personal TikTok user account. Usage profiles may be created from the data collected in this way using pseudonyms. However, this does not make it possible to identify users personally.

Your data may be transferred to third countries, such as the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transfer is therefore based on other safeguards described in the original privacy information.

Further information about data protection can be found at:

https://www.tiktok.com/legal/page/eea/privacy-policy/de

https://ads.tiktok.com/i18n/official/policy/controller-to-controller

Analysis of shopping behaviour and personalised emails (Birdsview)

If you consent to the use of cookies for analytics and marketing purposes in our cookie banner, we use Birdsview GmbH, Sebastian-Bach-Straße 47, 04109 Leipzig, Germany (“Birdsview”), to collect information about the product pages you visit in our shop and how you interact with them, for example the time spent on a page, scroll depth, product images viewed and variants selected.

The following data is processed: the pages and products visited; device type, operating system, browser and language; a device identifier generated from characteristics of your browser; your IP address exclusively in hashed (pseudonymised) form; and your customer number if you are logged in to your customer account or access our shop via a link in one of our emails. The identifiers are stored in your browser’s storage (Local Storage and Session Storage); no cookies are set for this purpose.

We use this information to understand which products you are interested in and to send you email reminders about these products. You will receive such emails if you have subscribed to our newsletter or if you have already made a purchase and we are permitted to inform you about similar products from our range (Section 7(3) of the German Act Against Unfair Competition – UWG). You can object to this at any time, for example by using the link provided in each email.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). No data is collected without your consent. You can withdraw your consent at any time via the cookie settings in our shop. Data collection will then stop immediately, and the identifiers stored in your browser will be deleted.

Birdsview processes the data exclusively on our behalf under a data processing agreement (Art. 28 GDPR). The raw data collected is deleted after 12 months, and analyses derived from it are deleted after 24 months. Further information is available in Birdsview’s privacy policy:

https://www.birdsview.com/datenschutz

PLUG-INS AND OTHER SERVICES

Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

Google Tag Manager is used to manage website tags via an interface. The Google Tag Manager itself does not store cookies, nor does it carry out any independent data analysis. It merely triggers other tags, which may collect data. Google Tag Manager does not access this data. If tracking has been disabled at domain or cookie level, this setting remains in place for all tracking tags implemented using Google Tag Manager.

Use of social plug-ins

We use social plug-ins on our website. When you access a page containing such a plug-in, a connection to the provider’s servers may be established and data transmitted.

Facebook

The social plug-in is provided by Facebook, operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). When the plug-in is activated, a direct connection is established between your browser and Facebook’s servers. Facebook receives information that you have visited our website, together with your IP address. If you are logged into your Facebook account, Facebook can associate your visit to our website with your account. If you interact with the plug-in, for example by clicking the “Like” button or leaving a comment, the corresponding information is transmitted directly to Facebook and stored there.

We have no influence over the scope of the data collected by Facebook using the plug-in. Further information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, can be found in Facebook’s privacy information:

https://www.facebook.com/about/privacy/

Instagram

The social plug-in is provided by Instagram, operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). When the plug-in is activated, a direct connection is established between your browser and Instagram’s servers. Instagram receives information that you have visited our website, together with your IP address. If you are logged into your Instagram account, Instagram can associate your visit to our website with your account. If you interact with the plug-in, the corresponding information is transmitted directly to Instagram and stored there.

Further information about the collection and use of data by Instagram, your related rights and options for protecting your privacy can be found in Instagram’s privacy information:

https://privacycenter.instagram.com/policy/

Use of Google reCAPTCHA

We use Google reCAPTCHA on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The query is used to distinguish whether an input is made by a human or abusively by automated, machine processing. For this purpose, your input is transmitted to Google and processed there. In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google.

This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Further information about Google reCAPTCHA and the related privacy policy can be found at:

https://www.google.com/recaptcha/intro/android.html

https://www.google.com/privacy

Use of Google invisible reCAPTCHA

We use the invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The invisible reCAPTCHA service is used to distinguish whether an input is made by a human or abusively by automated, machine processing. In the background, Google analyses usage data which Invisible reCAPTCHA uses for this purpose. Your input is transmitted to Google and processed there. In addition, your IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.

Further information about Google reCAPTCHA and the related privacy policy can be found at:

https://www.google.com/recaptcha/intro/android.html

https://www.google.com/privacy

Use of Google Maps

We use the function for embedding Google Maps provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

This function enables geographical information and interactive maps to be displayed visually. When pages containing Google Maps are accessed, Google also collects, processes and uses data about visitors to the websites.

Your data may also be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Further information about the collection and use of data by Google can be found in Google’s privacy information at:

https://www.google.com/privacypolicy.html

There you can also change your settings in the Privacy Centre so that you can manage and protect the data processed by Google.

Use of YouTube

We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos hosted on YouTube in an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store information about visitors to the website. Information is transmitted to YouTube and stored there only when you watch a video. Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Further information about the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube’s privacy information at:

https://www.youtube.com/t/privacy

Use of Google Fonts

We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data is processed to ensure the consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you use may be processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Further information about data processing and privacy can be found at:

https://www.google.de/intl/de/policies/

https://developers.google.com/fonts/faq

Use of Adobe Fonts

We use Adobe Fonts provided by Adobe Systems Software Ireland Limited (4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland; “Adobe”) on our website.

The data is processed to ensure the consistent display of fonts on our website. To load the fonts, a connection to Adobe servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser and operating system you use may be processed and transmitted to Adobe.

Your data may be transferred to third countries, such as the USA and India. There is no adequacy decision by the EU Commission for India. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Adobe is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Further information about data processing and privacy can be found at:

https://www.adobe.com/de/privacy/policy.html

https://www.adobe.com/de/privacy/policies/adobe-fonts.html

DATA SUBJECT RIGHTS AND DATA RETENTION

Retention period

After the contract has been fully performed, the data is initially stored for the duration of the warranty period, then taking into account statutory retention periods, in particular those under tax and commercial law, and is subsequently deleted once these periods have expired, unless you have consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights under Arts. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.

You also have the right under Art. 21(1) GDPR to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object

If the personal data processing described here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future.

Following an objection, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Last updated: 29 November 2023