Privacy policy
Information on the processing of your data
In accordance with art. 12 of the General Data Protection Regulation (hereinafter GDPR), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and the privacy policy informs you about the details of the processing of your data and your legal rights in this regard.
We reserve the right to adapt the privacy policy in the future, in particular in the event of the development of the website, the use of new technologies or changes in the legal bases or the corresponding case law.
We recommend that you read the Privacy Policy from time to time and save a paper or other copy for your records.
Definitions
“Website” or “Internet presence” hereinafter means all the pages of the controller on https://www.hello-body.fr.
"Personal data" means all information relating to an identified or identifiable natural person. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. Personal data is therefore, for example, a person's name, e-mail address and telephone number, but it can also include data on preferences, hobbies and memberships.
"Processing" means any operation or set of operations whether or not carried out using automated processes and applied to personal data, such as the collection, recording, organization, structuring, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, reconciliation, interconnection, limitation, erasure or destruction.
“Pseudonymisation” means the processing of personal data in such a way that these can no longer be assigned to a specific person without resorting to additional information, provided that this additional information is stored separately and subject to technical measures. and organizational to ensure that personal data is not assigned to an identified or identifiable natural person.
"Consent" means any freely expressed, informed and unequivocal declaration of intention in a particular case, in the form of a statement or other clear confirmatory act, by which the data subject indicates that he or she consents to the processing. personal data concerning him.
"Google" means Google, LLC 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; accessible in the European Union at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Scope
The privacy policy applies to all pages of https://www.hello-body.fr. It does not extend to any linked websites or Internet presences of other providers.
Responsible provider
Is responsible for the processing of personal data within the scope of this privacy policy:
Grenion GmbH
Q7 17a, 68161 Mannheim, Germany
Data Protection Questions
For any questions regarding data protection related to our company or website, you can contact our Data Protection Officer:
heyData GmbH
Schützenstraße 5, 10117 Berlin
Website: www.heydata.eu
Email: datenschutz@heydata.eu
Contact the Data Protection Officer
Security
We have taken all necessary technical and organizational precautions to protect your personal data against unauthorized access, misuse, loss and other external attacks. To do this, we regularly review our security measures and adapt them to the state of the art.
Your rights
You have the following rights regarding the personal data concerning you that you can assert against us:
right of access (Art. 15 GDPR),
right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to object to processing (Art. 21 GDPR),
right to revoke your consent (Art. 7, s. 3 GDPR),
right to receive data in a structured, common and machine-readable format (“data portability”) and right to subsequent transmission of data to another person responsible if the conditions of Art. 20, para. 1 let. a, b GDPR are met (Art. 20 GDPR).
You can assert your rights by providing the contact details indicated under the heading “Responsible provider” or by contacting the data protection officer appointed by us.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).
Use of the website, access data
In principle, you can use our website for purely informational purposes without revealing your identity. When consulting the various pages of the website, only the access data is transmitted to our web space provider so that the Internet page is displayed. These are the following data:
browser type / browser version,
operating system used,
language and version of the navigation software,
access terminal host name,
IP adress,
website from which the request originates,
content of the request (concrete page),
date and time of the server request,
access status / HTTP status code,
Referrer URL (page visited just before),
amount of data transmitted,
time zone difference from Greenwich Mean Time (GMT).
The temporary processing of the IP address by the system is necessary in order to technically enable the delivery of the website to your computer. A processing of your IP address for the duration of the session is necessary for this purpose. The legal basis for this processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
Access data is not used to identify individual users and is not merged with other data sources. Access data are deleted when they are no longer necessary to achieve the purpose of their processing. In the case of data collection for the provision of the website, this occurs when you end your visit to the website.
IP addresses are stored in log files to ensure the functionality of the website. This data is also used to optimize the website and ensure the security of our IT systems. An evaluation of the data for marketing purposes also does not take place in this context. In principle, the data is deleted after seven days at the latest, although further processing is possible in individual cases. In such cases, the IP address is erased or alienated in such a way that it is no longer possible to assign the client making the request.
The collection of data for the provision of the website and the processing of data in log files is mandatory for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves the assertion and exercise or defense of legal claims (Art. 21 (1) GDPR). In the event of a justified objection on your part, we will examine the facts and either cease or adapt the data processing or point out our compelling legitimate reasons on the basis of which we will continue the processing. You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Cookies
In addition to the access data mentioned above, cookies are stored in the Internet browser of the device you use when visiting the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies are not part of the PC system and cannot run any programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or take place for other purposes (e.g. analysis/evaluation of the use of the website).
a) Technically necessary cookies
Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in cookies:
language settings,
items in the basket,
login information.
The user data collected by technically necessary cookies is not processed for the creation of user profiles. We also use "session cookies", which store a session ID with which different
Your browser's quests can be assigned to the shared session. Session cookies are necessary for the use of the website. In particular, it allows us to recognize the device you are using when you return to the website. We use this cookie to recognize you on subsequent visits to the website if you have an account with us, otherwise you will need to re-register each time you visit the site. The legal basis for this processing is Art. 6 para. 1, sentence 1, let. f) GDPR. We use session cookies to make using the website more attractive and efficient. Session cookies are deleted as soon as you log out or close your browser.
Most browsers are configured to automatically accept cookies. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can deactivate or restrict the transmission of cookies by changing the settings of your Internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
b) Cookies that are not technically necessary
We also use cookies on the website that allow us to analyze the browsing behavior of users. The following data is, for example, stored and processed in cookies:
search terms entered,
frequency of pages viewed,
use of website functions.
These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1, sentence 1, let. f) GDPR. Cookies that are not technically necessary are automatically deleted after a certain period of time, which may vary depending on the cookie.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
By changing your browser settings, you have the option of blocking cookies generally or selectively or of deleting those that have already been saved. You can also have the corresponding information displayed before installing a cookie. You can also prevent the use of cookies by opening your browser in "private mode". If you change your browser settings to use or disable cookies, the functionality of this website may be limited.
Insofar as we integrate cookies from third parties on our website, we will inform you of this separately below.
Contact with our company
If you contact our company, for example via the contact form on the website, the personal data provided by you will be processed by us in order to respond to your request.
For the processing of inquiries via the contact form on the website, it is imperative to provide a name and a valid e-mail address. At the time the message is sent to us, the following data will also be processed:
IP adress,
date/time of registration.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR or Art. 6 para. 1, sentence 1, let. b) GDPR if the purpose of the contact is to conclude a contract. If you need to enter your data to enter into a contract, it may not be possible to enter into or perform a contract or process a request if the data is not provided.
The processing of personal data from the input mask only serves us to process the contact. In the case of contact by e-mail, this also falls within the legitimate interest necessary for the processing of the data. Other personal data processed during the processabove are used to prevent misuse of the contact form and to ensure the security of our IT systems.
In this case, the data will not be passed on to third parties. The data is processed exclusively for the processing of the conversation. We delete the resulting data when the processing is no longer necessary or limit the processing to compliance with applicable legal storage obligations.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Processing and transmission of personal data for contractual purposes
We process your personal data if and insofar as this is necessary for the initiation, creation, execution and/or termination of a legal transaction with our company. The legal basis for this is the art. 6 para. 1, sentence 1, let. b) GDPR. If the data processing is necessary for the conclusion of a contract, the conclusion of the contract, the execution and/or the termination of a legal transaction with our company may be impossible if the data is not provided.
Once the purpose has been achieved (e.g. fulfillment of the contract), the personal data will be blocked or erased for further processing, unless we have the right to store and process them, as the case may be, on the basis of a consent you have given (e.g. consent to the processing of the e-mail address to send advertising e-mail), a contractual agreement, a legal authorization (e.g. authorization for send direct advertising) or legitimate interests (e.g. retention to enforce rights).
The transmission of your personal data takes place in this respect, if
it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. in the case of transmission of data to a payment service provider / shipping company to process a contract with you) , (Art. 6 para. 1 sentence 1 letter b) GDPR), or
a subcontractor or vicarious agent, whom we use exclusively in the context of the provision of the offers or services that you have requested from us, needs this data (unless you are expressly informed of this , these vicarious agents are only authorized to process this data to the extent necessary for the provision of the offer or service), or
there is an enforceable administrative order (Art. 6 (1) sentence 1 (c) GDPR), or
there is an enforceable court order (Art. 6 (1) sentence 1 (c) GDPR), or
we are legally obliged to do so (Art. 6 (1) sentence 1 (c) GDPR), or
the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 (1) sentence 1 (d) GDPR), or
it is necessary for the performance of a task in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 let. e), or
we are entitled or even obliged to pursue overriding legitimate interests (Art. 6 (1) sentence 1 (f) GDPR).
Any transmission of your personal data beyond this framework to other persons, companies or organizations only takes place if you have given your effective consent to such transmission. The legal basis for the processing in this case is Art. 6 para. 1, sentence 1, let. a) GDPR.
Processing and transmission of personal data in the online ordering system
If you wish to place an order or make a reservation in our online shop, it is necessary for the establishment and conclusion of the contract that you provide personal data such as your name, address and e-mail address. Mandatory information required for order and contract processing is marked separately, and other information is provided voluntarily. If the necessary data is not available, the conclusion of the contract is not possible. We process your data for order processing, and we forward the payment data to the payment service provider of your choice or to our main bank. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. b) GDPR. To prevent unauthorized third parties from accessing your data.
For personal information, the ordering process on the website is encrypted using SSL/TLS technology.
You can voluntarily create a customer account in which we store your data for your subsequent visits to the website. When creating a customer account, the data provided by you is processed. You can modify or delete all other data, including that of your customer account, after your successful identification.
We delete the resulting data when the storage is no longer necessary or limit the processing in the presence of statutory retention obligations. Due to mandatory commercial and tax regulations, we are required to retain your contact details and your payment and order data for a period of ten years. Two years after termination of the contract, we limit the processing and reduce the processing to compliance with applicable legal obligations.
Registration / password-protected area of the website / customer account
If you wish to use the password-protected area of our website, you must register by providing the following information:
e-mail address,
surname and first name, as well as the address, if the opening of a customer account is linked to an order.
In addition, the following data is processed at the time of registration:
IP adress,
date/time of registration.
The data is deleted as soon as it is no longer necessary to achieve the purpose of its processing. This is the case for data collected during the registration process if it is canceled or modified on the website.
The following functions are available to you in the password-protected area:
change your profile data,
view past orders,
manage the reward system (“Refer friends” and loyalty program).
If you use the password-protected area of the website, for example to change your profile data or to view past orders, we also process data about you that is necessary for the establishment or execution of the contract, in particular your contact details and payment data. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. b) GDPR. The data is erased as soon as it is no longer necessary to achieve the purpose of its processing or as soon as there is no legitimate reason not to erase it. Due to mandatory commercial and tax regulations, we are required to retain your contact details and your payment and order data for a period of ten years. Two years after termination of the contract, we limit the processing and reduce the processing to compliance with applicable legal obligations. The data processing is necessary for the conclusion or establishment of the contract. If your data is not made available, you may not be able to use the password-protected area and it may not be possible to conclude or perform the contract.
If you voluntarily provide us with other data (e.g. about your interests, age, gender, preferences), we process this data, which is not necessary for the establishment or execution of the contract, as long as that you use the password-protected area and that you do not delete them yourself beforehand. Our goal is to optimize the use of the website for you as a user. The legal basis is Art. 6 para. 1, sentence 1, let. f) GDPR.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can at any time manage, modify or delete your data voluntarily entered in the password-protected area. You are free to take action under 'Your Rights', although we ask that you contact our company first in the event of a complaint.
Application process
We are delighted that you are interested in our company and are applying or have applied for a job with us. Below we would like to provide you with information on the processing of your personal data in the context of your application. We process the data necessary for the online application process (e.g. name, e-mail address and location) as well as the data you send to us as part of your application in order to verify yoursuitability for the position (or any other vacant position in our company) and to complete the application process.
The legal basis for the processing of your personal data in this application process is primarily Art. 26 of the LPD in the version in force from 25/05/2018. It authorizes the processing of data necessary for the decision on the creation of an employment relationship. If the data is required for legal proceedings after completion of the application process, data processing can be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 let. f) GDPR. Our interest then lies in claiming or defending rights.
Candidate data is erased after 6 months in the event of rejection. In the event that you have agreed to the retention of your personal data, we will transfer your data to our database of candidates. The data will be deleted there after two years. If you have been accepted for a position as part of the application process, data from the applicant data system is transferred to our personnel information system.
We use a specialist software provider for the application process. It acts as a service provider for us and may also become aware of your personal data in the context of the maintenance and upkeep of the systems. We have concluded a so-called order processing contract with this provider, which guarantees that the data processing takes place to the extent permitted.
Your application data is reviewed by the personnel department after receipt of your application. Suitable applications are then forwarded internally to department managers for the corresponding vacancy. Then the rest of the procedure is agreed. In the company, only people who need your data for the smooth running of our application process have access to it.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Email Marketing
Acquisition of existing customers
We reserve the right to use the e-mail address you provided to us as part of the order in accordance with legal provisions in order to send you the following contents by e-mail during or after the order, unless you have already objected to the processing of your e-mail address:
other interesting offers from our portfolio,
concerning events of our company,
questions about your specific wishes for product development,
feedback requests.
Insofar as the sending of electronic information is not necessary for the fulfillment of the contract (e.g. e-mail in informative form) and the legal basis of Art. 6 para. 1, sentence 1, let. b) GDPR is relevant, the processing is based on the legal basis according to Art. 6 para. 1, sentence 1, let. f) GDPR. Our legitimate interests in the aforementioned processing are to increase and optimize our services, to send direct advertising and to guarantee customer satisfaction. We delete your data if you withdraw from your user contract, but no later than three years after the termination of the contract.
We draw your attention to the fact that you can at any time oppose the receipt of direct advertising and the processing of data for the purposes of direct advertising without having to bear any costs other than the transmission costs according to the basic tariffs. . You have a general right of objection without giving reasons (Art. 21, para. 2 GDPR). After exercising your right to object, we delete your data in the context of acquiring existing customers. To do this, click on the unsubscribe link in the corresponding e-mail or send us your objection to the contact details indicated under the heading “Responsible supplier”.
Using Zenloop to Send Feedback Requests
We also use your email address to send feedback requests. The email contains a so-called NPS query, a “Net Promoter Score” for measuring customer satisfaction, which is created and sent by Zenloop (Zenloop GmbH, Brunnenstraße 196, 10119 Berlin). AT
For this purpose, Zenloop receives your email address, name and order number once you have ordered. Zenloop stores your data and feedback within the European Union. Zenloop uses your data after anonymization to develop reports or benchmarks, where the anonymized data is used for security and operational management purposes to create statistical analyzes and for research and development purposes. Zenloop always deletes your data after expiry of the legal retention periods, unless other legal bases justify the data processing. For more information, please see Zenloop's privacy policy at https://www.zenloop.com/de/legal/privacy.
We and our affiliates use your data to make our offer more attractive and to make improvements. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Using Mailjet to Send Product Feedback Requests
We use the e-mail marketing service "Mailjet" from the provider Mailjet GmbH (c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf, Germany); https://uk.mailjet.com/) to send you product feedback requests via email after your purchase. To do this, Mailjet processes your e-mail address within the European Union for as long as necessary for the provision of its service. In addition, technical information such as the browser used, the time of the page visit and the IP address are processed. This information is processed for the evaluation and technical improvement of our service.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. We have no knowledge of the storage period at Mailjet and have no influence on it.
For more information, please see Mailjet's privacy policy at https://www.mailjet.de/sicherheit-datenschutz/ and the data protection directive, available at https://fr.mailjet.com/ privacy-policy/ .
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Feedback requests via Trustpilot
For customer feedback requests, we use "Trustpilot", a service provided by Trustpilot A/S (Pilestræde 58, 5, 1112 Copenhagen, Denmark). After an order in our online shop, we transmit your data necessary for the feedback request, such as the product, name and e-mail address as well as the order number to "Trustpilot". “Trustpilot” processes this data in order to send you a link to review our products by e-mail (feedback e-mail). “Trustpilot” stores this data for three years. Feedback emails will be deleted after 30 days. You can submit your review after clicking on the link sent to you. After selecting the star rating, you can enter your own review text, as well as a name/nickname under which your review should be published on Trustpilot and the social media channels we have stored on Trustpilot, such as Facebook and Google.
“Trustpilot” does not process important data in a third country if it has not taken the necessary measures to ensure the level of data protection guaranteed throughout the European Union. These include an adequacy decision by the European Commission and the conclusion of adopted or approved standard data protection clauses. In addition, “Trustpilot” has taken its own additional security measures (e.g. encryption) and has only used subcontractors who have themselves taken additional security measures to emfishing third party access. A copy of the standard data protection clauses can be requested via "Trustpilot".
The legal basis for the processing is Art. 6 para. 1, phrase. 1 let. f) GDPR. Our legitimate interests consist in receiving customer feedback for the regular improvement of our products and offers as well as using a service provider for the optimization and targeted sending and publication of customer feedback .
Further information on data processing by “Trustpilot” can be found at https://fr.legal.trustpilot.com/for-reviewers/end-user-privacy-terms and https://fr.legal.trustpilot. com/for-businesses/data-processing-agreement.
You can object to the processing. Your right to object exists for reasons arising from your specific situation. You can inform us of your opposition via the contact details mentioned in the section “Responsible service provider”.
Newsletter by “WhatsApp”
For sending information via WhatsApp, we use a marketing messaging service from the provider telegra GmbH, headquartered at Oskar-Jäger-Straße 125, 50825 Cologne (Web: https://www.telegra.de/) . This is a white label solution of atms Telefon- und Marketing Services GmbH, headquartered at Leonard-Bernstein-Straße 10 Saturn Tower, 1220 Vienna (Web: https://atms.at/de) .
Through this service we can organize and manage the sending of newsletters through the WhatsApp messaging service.
If the subscription to the newsletter is not confirmed within three weeks of entering the telephone number by entering the word "Start" via a WhatsApp message, we automatically delete this information after three weeks maximum following the entry of the telephone number.
After registration for the newsletter via WhatsApp, we process the telephone number and the displayed user name of the respective recipient for the dispatch of our newsletter. The legal basis for the processing is Art. 6 para. 1, p. 1 let. a) GDPR. We delete this data if you terminate your newsletter subscription after three months at the latest.
A revocation of the consent to the processing of personal data for the receipt of the newsletter by WhatsApp is possible at any time, either by e-mail (see contact details in the section "Responsible provider") or by message "stopde" on Whatsapp. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation (Art. 13 para. 2 lit. c GDPR).
You also have the right to object to the processing of your personal data for direct marketing purposes in accordance with Art. 21, para. 2 GDPR. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
If you contact us via WhatsApp in the context of the newsletter, for example with questions about the products, we will process your message to answer them. The legal basis for this is Art. 6 para. 1, p. 1 let. b) GDPR. The data you enter to subscribe to the newsletter (e.g. telephone number, messages sent), in particular user name and IP address, are also processed on the servers of the service providers. messaging service in the European Union. By using WhatsApp, WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) of course also receives the transmitted data in accordance with its terms of use and privacy policy. You can find them here https://www.whatsapp.com/legal/?lang=fr#key-updates.
The messages we send through the marketing messaging service allow us to analyze the behavior of the recipients. Among other things, we can analyze which recipients have received the message and which have opened it.
The evaluation of the information mentioned serves to recognize the reading habits of the recipients in order to be able to better adapt and distribute the content of our newsletters. The legal basis for the processing is Art. 6 para. 1, p. 1 let. f) GDPR. We process this data for a period of two years after the end of the contract. If the registration for the newsletter does not take place within the framework of a contract, we process this data for two years after the end of the user process. We delete this data when the subscription to the newsletter ends within the periods indicated above.
We have no knowledge of the storage period with the marketing email service providers and have no influence on them. telegra GmbH automatically deletes messaging messages after 90 days (https://www.telegra.de/wam/). Further information on data protection and the protection of your privacy can also be found at https://atms.at/de/whatsatool-faq.
You can object to the processing. Your right to object exists for reasons arising from your specific situation. We will not continue to process your data unless we have compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and the processing serves to invoke and exercise legal claims or to defend against them (Art. 21, para. 1 GDPR). You can inform us of your opposition via the contact details mentioned in the section “Responsible service provider”.
Comments / visitor register function on the website
By using the link to our shop system sent by Mailjet, you can rate the product you have purchased on our website, if you have a customer account.
When registering, we process the following personal data:
e-mail address,
full name,
username,
residence.
In addition, the following data is processed at the time of registration:
IP adress,
date/time of registration.
When your registration is published, the e-mail address you provided will not be published, only the name you entered in your customer account will be. There is no obligation to use a real name, you are free to use the function under a pseudonym. In your customer account, you can change the name to be displayed at any time. Your entry is checked by us before publication. We reserve the right to remove listings at any time if they are deemed to be illegal.
We process your e-mail address and your name/pseudonym in order to determine, if necessary, whether this is an actual experience report. In addition, we would like to be able to contact you if we deem your registration on the website illegal, and defend ourselves against complaints or claims that may be made against us on the basis of your registration.
For this, we also process your IP address. The IP address is deleted by us after one week. In any case, we process your e-mail address as long as the registration on the website is maintained or we are involved in a legal dispute due to the registration.
If you delete or if we delete your registration, we process the e-mail address, the name provided and other information voluntarily entered until the expiry of the statutory limitation periods for the aforementioned prevention and defense reasons. , but limit the processing of this data after 6 months.
We do not pass on the data to third parties, unless the law or an official or judicial order obliges us to do so or the transmission is necessary for the defense of our legitimate interests. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can ask us to delete your registration at any time. To do this, please contact us via the contact details indicated under the heading “Responsible”. You are free to take action under 'Your Rights', although we ask that you contact our company first in the event of a complaint.
Information letter
You have the option of subscribing to our electronic newsletter on the website, which will regularly inform you about the following contents:
offers from our portfolio,
events of our company,
offers (or events) from third parties, insofar as you have given your consent,
new items / new collections,
special offer / limited time offers.
A valid e-mail address must be provided to receive the newsletter.
Registration for our e-mail newsletter is done using the double opt-in procedure. When you have the data marked as mandatory, we will send you an e-mail to the e-mail address you have indicated, in which we ask you to expressly confirm your subscription to the newsletter (by clicking on a link of confirmation). This way we make sure that youwould like to receive our newsletter by e-mail. If confirmation does not take place within 24 hours, we block the information transmitted to us and delete it automatically after one month at the latest.
In addition, the following data is processed at the time of subscription:
IP adress,
date/time of subscription to the newsletter,
time of your confirmation on the confirmation link.
We process your IP address, the time of the newsletter registration and the time of your confirmation in order to document your newsletter registration and to prevent the misuse of your personal data. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. We process this data for a period of two years after termination of the contract. If the registration for the newsletter takes place without the conclusion of a contract, we process this data for two years after the end of the user procedure. We delete this data when the newsletter subscription ends.
After your confirmation, we process the e-mail address of the respective recipient in order to send you our newsletter by e-mail. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. a) GDPR. We delete this data when you cancel the newsletter subscription.
You can revoke your consent to the processing of your e-mail address for the receipt of the newsletter at any time, either by sending us a message (see contact details under the heading "Provider responsible"), or by clicking on the unsubscribe link in the newsletter. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation (Art. 13 (2) (c) GDPR).
We inform you that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain web beacons or tracking pixels, which represent one-pixel image files and are integrated into our website. To carry out the evaluations, we associate the data mentioned under "Access data" and the web beacons with your e-mail address and an individual identifier. The links received in the newsletter also contain this identification.
With the data collected, we create a user profile in order to tailor the newsletter to your specific interests. We record when you read our newsletter, which links you click on in the newsletter and derive your personal interests from this. We associate this data with the actions you take on our website. The information is processed as long as you are subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.
The purpose is to evaluate the use and optimization of the e-mail advertising that we send to you. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
We draw your attention to the fact that you can at any time oppose the receipt of direct advertising and the processing of data for the purposes of direct advertising without having to bear any costs other than the transmission costs according to the basic tariffs. . You have a general right of objection without giving reasons (Art. 21, para. 2 GDPR). After exercising your right to object, we delete your data in the context of direct advertising. To do this, click on the unsubscribe link in the corresponding e-mail or send us your objection to the contact details indicated under the heading “Responsible supplier”.
You can also prevent tracking by systematically disabling the display of images in your email program. In this case, the newsletter is not displayed completely and you may not be able to use all functions. If you configure your program to display images manually, the above tracking will occur.
Email marketing service “Emarsys” and “Klaviyo”
Email marketing service "Emarsys" and "Klaviyo" We use the email marketing service "Emarsys" provided by Emarsys eMarketing Systems AG, located at Hans-Fischer-Straße 10, 80339 Munich, Germany, and accessible at https://www.emarsys.com/de. Additionally, we utilize the email marketing service "Klaviyo" provided by "Klaviyo, Inc.," with its headquarters at 125 Summer Street, 6th Floor, Boston, MA 02110. Emarsys and Klaviyo are services that facilitate the organization and analysis of newsletter dispatch. The data provided, such as email addresses for newsletter subscription, is processed on servers located in the USA operated by Emarsys/Klaviyo. Our newsletters, sent through Emarsys/Klaviyo, enable us to analyze recipients' behavior. This includes tracking how many recipients opened the newsletter and the frequency of clicks on specific links. Conversion tracking allows us to assess whether predefined actions (e.g., product purchases on our website) occurred after clicking on links in the newsletter. The evaluation of this information helps us understand recipients' reading habits, allowing us to adapt and optimize our newsletter content accordingly. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. We retain this data for a period of two years after contract termination. If newsletter registration occurs without a contract, we process the data for two years after the end of the usage process. Deletion of this data occurs when the newsletter subscription ends. We are not aware of the storage period at Emarsys/Klaviyo and have no influence over it. For additional information on data protection and privacy, please refer to https://www.emarsys.com/en/privacy-policy/ and https://www.klaviyo.com/legal/privacy/privacy-notice. Please note that you can object to receiving direct advertising and the associated data processing at any time, incurring only transmission costs according to standard rates. You have a general right to object without providing reasons (Art. 21 (2) GDPR). Upon exercising this right, we will promptly delete your data related to direct advertising. To do so, click on the unsubscribe link in the respective email or send your objection to the contact details provided in the "Responsible provider" section. This action also concludes the processing for receiving the newsletter and statistical analyses. It is not possible to separately object to the sending via Emarsys/Klaviyo or the statistical analysis.
Email marketing service “MailChimp”
We use the email marketing service "MailChimp" from the provider Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, site: https://mailchimp.com/ ; hereinafter: “MailChimp”).
If you have subscribed to the newsletter, the data provided during your registration is stored and processed on MailChimp's servers in the United States. MailChimp is subject to the Privacy Shield Agreement between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can view the Rocket Science Group certification at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG. MailChimp traite this information to send and evaluate the newsletter on our behalf. Newsletters contain web beacons called "web-beacons", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. As part of the recovery, technical information, such as the browser used, the time of the page visit and the IP address, is collected. This information is processed for the evaluation and technical improvement of our service. In addition, the evaluation includes when newsletters are opened and which links are clicked by the reader. This information can theoretically be assigned to individual newsletter recipients. However, neither MailChimp nor we intend to monitor individual recipients; the purpose of the evaluation of the information mentioned is rather to identify the reading habits of the recipients in order to better adapt, optimize and control the contents of our newsletter. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. We have no knowledge of the storage period at MailChimp and have no influence on it.
We draw your attention to the fact that you can at any time oppose the receipt of direct advertising and the processing of data for the purposes of direct advertising without having to bear any costs other than the transmission costs according to the basic tariffs. . You have a general right of objection without giving reasons (Art. 21, para. 2 GDPR). After exercising your right to object, we delete your data in the context of direct advertising. To do this, click on the unsubscribe link in the corresponding e-mail or send us your objection to the contact details indicated under the heading “Responsible supplier”.
The processing for the receipt of the newsletter and for the statistical analyzes ends simultaneously. A separate objection to the dispatch via MailChimp and the statistical evaluation is not possible.
You can also object at https://www.aboutads.info/choices/ and https://www.youronlinechoices.com/ (for the European Union area). You can also prevent the use of cookies by opening your browser in "private mode".
Furthermore, MailChimp may, according to its own information, use the transmitted data for the optimization and improvement of its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter. MailChimp does not process the data, according to its own statements, in order to write to you with its own advertising, and the data is not passed on to third parties.
As the recipient of the newsletter, you may be redirected to the MailChimp website, for example if you click on the link in the newsletter to retrieve it online in the event of a display problem in your email program. In this respect, we draw your attention to the fact that MailChimp may use other analysis services and cookies on its website, which may process your personal data on behalf of MailChimp. We have no influence on this processing.
Payment Service Provider (PSP)
PayPal
On our website we offer payments via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal takes place on the basis of Art. 6 para. 1, sentence 1, let. b) GDPR (processing for the performance of a contract). If the data is not provided, it may not be possible to conclude or perform the contract. We have no knowledge of the storage period at PayPal and have no influence on it.
Amazon Payments
On our website we offer payments via Amazon Payments. If this payment method is selected, the execution of payments takes place through the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter "payment service provider"), to which we transmit your personal data provided during the ordering process as well as information concerning your order. The transmission of your data to Amazon Payments takes place on the basis of Art. 6 para. 1, sentence 1, let. b) GDPR (processing for the performance of a contract). If the data is not provided, it may not be possible to conclude or perform the contract.
Amazon Payments creates a transaction confirmation (receipt) based on the transmitted data and performs identity and credit verification if necessary. Amazon Payments has a legitimate interest in the transmission of personal data of the buyer and processes it, for example to obtain information from credit reference agencies for identity and credit verification purposes. The legal basis for data processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
In credit checking, mathematical and statistical procedures are used to determine a rating as to the probability of a payment default (also called calculating a rating value). Amazon Payments bases its decision on the calculated rating value for the provision of the respective payment methods. The calculation of a rating value is carried out according to recognized scientific procedures.
In addition to contact details, information about past payment behavior and probability values about expected future payment behavior are also included. We have no knowledge of the storage period at Amazon Payments and have no influence on it.
You can contact Amazon Payments at the following address eu-privacy@amazon.lu. Further information on the processing of your data by Amazon Payments is available at https://pay.amazon.com/en/help/201751600.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
However, Amazon Payments retains the right to process and transmit customer data if this ist necessary for the contractual execution of the payment (Art. 6 para. 1 sentence 1 letter b) GDPR) or if required by law, authorities or courts (Art. 6 para. 1 lit. sentence 1, letter c) of the GDPR).
Payment by Stripe
The payment service provider Stripe (Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland) is one of the payment methods available to you. Your data is transmitted to Stripe, which can carry out a verification identity and credit on the basis of the data you have provided (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number). Details can be found in the information displayed during our booking process. The legal basis for the processing for the processing of payments is Art. 6 para. 1, sentence 1, let. b) GDPR. The processing of the data is necessary in particular for the conclusion of the contract. If the data is not provided, it may not be possible to conclude or perform the contract.
As part of an identity and credit check based on your data, Stripe and ourselves have a legitimate interest in the transmission of the personal data of the user concerned. We and Stripe need this data to obtain information from credit reference agencies for identity and credit checking purposes (Art. 6 para. 1 sentence 1 letter f) GDPR). These may include the credit agencies listed at https://stripe.com/en/privacy.
We delete the resulting data when the storage is no longer necessary or limit the processing in the presence of statutory retention obligations.
Further information on the privacy policy of the Stripe service is available at www.stripe.com/fr/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
However, Stripe retains the right to process and transmit customer data if this is necessary for the contractual execution of the payment or if required by law, authorities or courts. You can contact Stripe at info@stripe.com.
Transmission of personal data for law enforcement/address tracing/collection purposes
In the event of non-payment, we reserve the right, in the presence of a legitimate interest according to Art. 6 para. 1, sentence 1, letter f) of the GDPR, to pass on the data provided during the order to a lawyer and/or to external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss, Germany) in order to determine the address and/or to enforce the law.
In addition, we pass on your data if this is necessary to exercise our rights, as well as the rights of our affiliates, cooperation partners, employees and/or users of our website. Under no circumstances will we sell or rent your data to third parties. The transmission of this data is based on Art. 6 para. 1, sentence 1, let. f) GDPR.
We delete the resulting data when the storage is no longer necessary or limit the processing in the presence of statutory retention obligations.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Accommodation
We use external hosting services to provide the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. All data necessary for the operation and use of our website is processed.
We use external hosting services to operate this website. With the use of external hosting services, we aim to upgrade efficient and secure provision of our website. The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR.
The collection of data for the provision and use of the website and the processing of data by external hosts is mandatory for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Integration of third-party content
The website includes third party content such as videos, maps, RSS feeds or graphics from other websites. This integration always assumes that the providers of such content (“third-party providers”) detect the IP addresses of users. Indeed, without the IP address, they cannot send the contents to the browser of the respective user. The IP address is therefore necessary for the presentation of this content.
We endeavor to only use content from third parties that process the IP address for the sole purpose of delivering the content. However, we have no influence on whether third parties process IP addresses for statistical purposes, for example. To the best of our knowledge, we inform you below.
Some third-party providers may process data outside of the European Union.
You can object to this by installing a JavaScript blocker such as the “NoScript” browser plugin (www.noscript.net) or by deactivating JavaScript in your browser. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
working
We use the workable application tool at https://hellobody.workable.com/ (Workable Software Limited, 21a Kingly Street, 2nd Floor, London, UK). The data you enter during the application process is processed by workable. The processing by workable takes place within the European Union. We integrate the tool to make our website more attractive and to offer you additional services. The legal basis for data processing is Art. 6 para. 1, sentence 1, let. f) GDPR. Further information on data protection at workable can be found at https://www.workable.com/privacy. We have no knowledge of the storage period of the data processing at workable and have no influence on it.
You can also use and integrate your data stored on LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043) when applying via the application tool. If you select this function, LinkedIn knows that you are accessing LinkedIn from https://hellobody.workable.com/. The data concerning you is then transmitted to LinkedIn. In addition, your data stored at LinkedIn (profile data, such as names, photos, profile slogans, professional experience, training, knowledge and recommendations as well as your LinkedIn-related email address, telephone numbers and other contact details related to to your LinkedIn account) are transferred to workable. The transfer of data from LinkedIn to workable takes place on the basis of the consent you have requested on the legal basis of Art. 6 para. 1, sentence 1, let. a) GDPR. The transmission of your IP address to LinkedIn is based on Art. 6 para. 1, sentence 1, let. f) GDPR. The purpose of this processing is also the improvement of our service offer as well as the more attractive and candidate-friendly design of our website. LinkedIn also processes data outside the European Union, but has submitted to the Privacy Shield agreement between the European Union and the United States and is therefore committed to complying with European data protection standards (https ://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). We have no knowledge of the storage period at LinkedIn and have no influence on it. Further information on data protection at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy. For more information on data usage by apps, please click here: https://www.linkedin.com/help/linkedin/answer/1207?lang=de
You can revoke your consent to the processing of your LinkedIn data at any time by sending us a message (see contact details under “Responsible provider”). The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation (Art. 13 (2) (c) GDPR). You can opt out of data synchronization in LinkedIn settings at https://www.linkedin.com/psettings/permitted-services.
Furthermore, you have the right to object to the processing of your other data. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR).
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “Google reCAPTCHA”) on our website. The service provider is Google.
The purpose of reCAPTCHA is to check whether data on the website (eg in a contact form) is entered by a person or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the user accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g. the IP address, the duration of the visitor's stay on the website or the mouse movements made by the user). The data collected during the analysis is transmitted to Google. Google also processes your personal data in the United States and is subject to the Privacy Shield Agreement between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can find Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
reCAPTCHA scans run entirely in the background. You are not informed that a scan is in progress.
The processing is based on Art. 6 para. 1, sentence 1, let. f) GDPR. We have a legitimate interest in protecting our web offers against abusive automated spying and unwanted e-mail advertising (spam). We have no knowledge of the storage period at reCAPTCHA and have no influence on it.
For more information about Google reCAPTCHA and Google's privacy policy, please see the links below:
https://policies.google.com/privacy?hl=fr and https://www.google.com/recaptcha/intro/android.html.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Google AJAX Search API
We use the Google AJAX Search API as our central search service. The integrated search service enables full-text search of content from the current Internet offer.
For information to users, the text “search with Google™…” is displayed in the search box. If the search box input field is selected by the user and filled in with a search term, an additional link appears below the search box which refers to this data protection information.
Data is only transferred to Google when you activate the search box, perform a full-text search and thus open the search results page. By using the search function in the search results page, your data is also transferred to Google at the same time. This includes, for example, the search terms you have entered and the IP address of the computer you are using. If you visit our official website without activating the Google AJAX search API, no data will be transferred to Google. We draw your attention to the fact that the processing of personal data possibly transmitted is the responsibility of Google and we have no influence on the type and extent of the transmitted data or their further processing. If you are logged in to Google at the same time, the Google service is able to assign the information directly to your user profile. You must log out to avoid collection of information on your profile.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. The purpose of the processing is to make our website more attractive and to provide you with an additional service. We have no knowledge of the storage period at Google and have no influence on it.
For more information on Google's user data management practices (privacy policy), please see https://policies.google.com/privacy?hl=en.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can deactivate or restrict the transmission of cookies by changing the settings of your Internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening your browser in "private mode". If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
Google web fonts
For the uniform display of fonts, we use so-called web fonts, provided by Google. When you open a page, your browser downloads to its cache the web fonts you need to display text and fonts correctly.
For this, the browser you use must connect to Google's servers. Google thus knows that you have accessed our website via your IP address. Google also processes your personal data in the United States and is subject to the Privacy Shield Agreement between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can find Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The use of Google web fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1, sentence 1, let. f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.
For more information on Google web fonts, please see https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Google Tag Manager
We use the Google Tag Manager on our website. Google's Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other beacons which may themselves collect data. The Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it persists for all tracking tags implemented with the Google Tag Manager.
YouTube videos
We use plugins from the YouTube.de or YouTube.com video platform on the website, a service operated by YouTube LLC (main office at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube") and represented by Google. Thanks to the plugins, we can also integrate visual content ("videos") into this website, which we have published on Youtube.de or Youtube.com.
The videos are all included in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play them. Only when you play the videos, the following data is transmitted. We have no influence on this data transfer.
When you visit the website, YouTube is informed that you have accessed the corresponding subpage of our website. In addition, the data mentioned under "Access data" is transmitted. This occurs regardless of whether YouTube provides a user account to which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and processes them for the purposes of advertising, market research and/or the design of its website as required. Such an evaluation is carried out in particular (even for users who are not logged in) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the United States and is subject to the Privacy Shield Agreement between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can find Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. The purpose of the processing is to make our website more attractive and to provide you with an additional service. We have no knowledge of the storage period at YouTube and have no influence on it.
Further information on the purpose and scope of processing by YouTube can be found in the privacy policy at https://policies.google.com/privacy?hl=de&gl=en.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can deactivate or restrict the transmission of cookies by changing the settings of your Internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening your browser in "private mode". If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
Vimeo
For the integration of videos on our website, we use plugins from Vimeo. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. Thanks to the plugins, we can also integrate visual content ("videos"), which we have published on www.vimeo.com, into this website.
When you access one of our websites with the Vimeo plugin, a connection is established with the Vimeo servers. The Vimeo server will then know which website you have visited. If you are logged into Vimeo as a member, Vimeo assigns this information to your personal user account. When using the plugin, for example when playing a video by activating the play button, this information is also assigned to your user account. Vimeo stores your data as user profiles and processes them for the purposes of advertising, market research and/or the design of its website as required. Such an evaluation is carried out in particular (even for users who are not logged in) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. The purpose of the processing is to make our website more attractive and to provide you with an additional service. We have no knowledge of the storage period at Vimeo and have no influence on it.
We have entered into “standard contractual clauses” with Vimeo to require Vimeo to maintain an adequate level of data protection. We will provide you with a copy of the agreement on request.
Further information on data processing and data protection by Vimeo can be found at https://vimeo.com/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can deactivate or restrict the transmission of cookies by changing the settings of your Internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening your browser in "private mode". If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
Services for statistical, analytical and marketing purposes
We use third party services for statistical, analytical and marketing purposes. Thus, we are able to provide you with a user-friendly and optimized use of the website. Third-party providers use cookies to control their services (see “Cookies” above). Personal data is not processed, unless otherwise specified below.
Some third-party providers offer the possibility of directly opposing the use of the service concerned, for example by installing an opt-out cookie.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
If you activate a corresponding opt-out cookie, the external provider will no longer process any data about your usage behavior in the future. A simple selective opposition against an individual selection of external services is also possible. If you change the browser or device you are using or if you delete all cookies, you must reset the opt-out cookie.
In addition, you can also object directly to the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (Federal Association for the Digital Economy, BVDW) at https://www.meine-cookies.org/cookies_verwalten /praeferenzmanager.html or via the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/.
Further information on usage-based advertising and opt-out options can also be found at the following link: https://www.youronlinechoices.com/en/.
You can also prevent the use of cookies by opening your browser in "private mode".
In the following, we inform you about the services of external providers currently used on our website as well as the respective purpose and scope of the processing in each case and your existing possibilities of objection.
Google Analytics
In order to optimally adapt our website to your interests, we use Google Analytics, a web analysis service from Google. Google Analytics uses text files called "cookies" (see the "Cookies" section above), which are stored on your computer and allow you to analyze your use of the website. The information thus generated about your use of this website is transmitted to a Google server in the United States where it is processed.
If IP anonymisation is activated on this website, however, your IP address will be abbreviated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The full IP address is only sent to a Google server in the USA and truncated there in exceptional cases. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to the use of the website. website and the Internet.
The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in an abbreviated form, which excludes the possibility of user identification. If the data collected about you allows a link to be established with a person, this is immediately excluded and the personal data is therefore immediately deleted.
We use Google Analytics to analyze and regularly improve the use of our website. Thanks to the statistics, we can improve our offer and make it more interesting for you as a user. For the exceptional cases where personal data is transferred to the United States, Google is subject to the Privacy Shield between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can find Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the processing of Google Analytics is Art. 6 para. 1, sentence 1, let. f) GDPR. Analytics cookies are deleted after fourteen months at the latest.
Further information on the third-party provider Google can be found at:
https://www.google.com/analytics/terms/de.html, https://www.google.com/intl/de/analytics/learn/privacy.html, https://policies.google.com/ privacy?hl=fr&gl=de.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can avoid the storage of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https:/ /tools.google.com/dlpage/gaoptout?hl=en. You can also prevent the use of cookies by opening your browser in "private mode".
Hotjar
We also use the Hotjar analysis service to improve our website and make it more user-friendly. The analytics service provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, +1 (855) 464-6788, david@hotjar.com)
This tool records movements on the web pages observed in so-called heat maps. All data is collected without us being able to assign it to specific users. It is only possible to understand how the mouse was moved, where it clicked and how far it scrolled. This allows us to improve our website and make it more user-friendly. Device screen size, device type, browser information, country viewed from and preferred language are also logged. If a website displays personal data, Hotjar automatically hides it. So we don't have access to it.
To analyze your usage behavior, we use so-called "cookies" text files (see the "Cookies" section above), which are stored on your computer and allow you to analyze your use of the website. The information generated by the "tracking code" and the "cookie" about your visit to our website is transmitted to the Hotjar servers and stored there. The tracking code collects the following information about your device, such as IP address, device type and browser information, geographic location (country only), preferred language for viewing our website, pages visited, the date and time the website was accessed. Hotjar abbreviates your IP address before it is processed. If the data collected about you allows a link to be established with a person, this is immediately excluded and the personal data is therefore immediately deleted.
Hotjar uses this information to evaluate your use of our website, to compile usage reports and other usage-related services. of the website and its evaluation via the Internet. Hotjar also uses third-party services such as Google Analytics and Optimizely for its service delivery. These third-party companies may store information that your browser sends when you visit the website, such as cookies or IP queries. For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy policies.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. The cookies that Hotjar uses have different storage periods. Some are valid for up to 365 days, others are only valid during the current visit. You can find an overview of the storage period at: https://www.hotjar.com/legal/policies/cookie-information. More information about Hotjar Ltd. and the Hotjar tool are available at: https://www.hotjar.com/legal/policies/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can object to the processing in different ways:
by activating the "Do Not Track" function of your browser software, which is supported by Hotjar. For instructions on enabling the Do Not Track feature, please see: https://www.hotjar.com/legal/compliance/opt-out
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers, or
by disabling interest-based advertisements from providers that are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is deleted when you delete your cookies,
by opening the browser used in “private mode” to prevent your usage behavior from being tracked.
Usage-Based Online Advertising
Facebook Custom Audiences
In addition, the website uses the “Website Custom Audiences” function of Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: Impressum-support@support.facebook.com, information on data protection at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). So-called web beacons, such as the "Facebook pixel", collect statistical information about you, which is processed by Facebook. This allows users of the website to be presented with advertisements of interest (“Facebook advertisements”) as part of their visit to the social network Facebook or other websites that also use the process.
With the "Facebook pixel", your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further processing of the data collected by the use of this tool by Facebook and inform you of this according to the state of our knowledge: By integrating the "Facebook pixels", Facebook is informed of the the fact that you have accessed the website corresponding to our Internet presence or clicked on one of our advertisements. Facebook is informed that you have visited certain parts of our website. Facebook also uses tracking technologies, such as web beacons (web beacons) to place a cookie on your computer. Among other things, the data mentioned under "Access data" is transmitted. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, the provider may collect and store your IP address and other identifying characteristics.
The legal basis for processing your data is Art. 6 para. 1, sentence 1, let. f) GDPR. We seek to show you advertisements that are of interest to you and to make our website more interesting to you. In this case, we do not store any personal data about you. We have no knowledge of the storage period at Facebook and have no influence on it.
For more information on the processing carried out by Facebook, please see
https://www.facebook.com/about/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Deactivation of the "Facebook Custom Audiences" function is possible at https://www.facebook.com/settings/?tab=ads#_ for logged in users.
You can prevent the “Facebook Custom Audiences” feature in several ways:
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers;
by disabling interest-based advertisements from providers that are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is deleted when you delete your cookies,
by opening the browser used in "private mode" to prevent the use of cookies.
Facebook Analytics
We continue to use Facebook's "Facebook Analytics" tool (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information data at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”). For the use of Facebook Analytics, we use the "Facebook pixel" to measure the extent of our advertisements. Facebook also uses tracking technologies, such as web beacons (web beacons) to place a cookie on your computer. Among other things, the data mentioned under "Access data" is transmitted.
The information obtained with the "Facebook cookie" is only used for statistical purposes, is transmitted to us anonymously by Facebook and does not reveal any information about the user. It is processed by Facebook together with your Facebook account in accordance with its data protection guidelines. Even if you are not registered with Facebook or have not logged in, the provider may collect and store your IP address and other identifying characteristics.
The processing of your data is based on Art. 6 para. 1, sentence 1, let. f) GDPR. By using Facebook Analytics, we seek to be able to better evaluate our web offer and our advertisements and to be able to improve our service offer. In this case, we do not store any personal data about you. We have no knowledge of the storage period at Facebook and have no influence on it.
For more information on Facebook's privacy policy, please see the corresponding data use policy at https://fr-fr.facebook.com/about/privacy/.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
Deactivation of the "Facebook Analytics" function is possible at https://www.facebook.com/settings/?tab=ads#_ for logged in users.
You can prevent the "Facebook Analytics" function in several ways:
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers;
by disabling interest-based advertisements from providers that are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is removed when you delete your cookies.
by opening the browser used in “private mode” to prevent your usage behavior from being tracked.
Google AdWords Conversion
We use the Google Adwords offer from Google to draw attention to our attractive offers using advertising media (Google AdWords) on external websites. Based on data from advertising campaigns, we can determine how effective individual advertising measures are.
These advertising media are distributed by Google via “Ad Servers”. For this farea, we use Ad Server cookies, which can be used to measure certain performance metrics, such as display of ads or user clicks. If you access our website via a Google ad, Google AdWords stores a cookie on your device. These cookies generally lose their validity after 30 days and should not be used to identify you. Unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be contacted) are usually saved as analysis values for this cookie.
These cookies allow Google to recognize your Internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each AdWords customer. We only receive statistical evaluations from Google to measure the effectiveness of our advertising materials.
Through the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further processing of the data collected by the use of this tool by Google and inform you of this according to the state of our knowledge: By integrating AdWords Conversion, Google is informed that you have accessed the part corresponding to our presence on the Internet or that you have clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may collect and store your IP address.
Google processes data in the United States and is subject to the Privacy Shield Agreement between the European Union and the United States, https://www.privacyshield.gov/EU-US-Framework. You can find Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for processing your data is Art. 6 para. 1, sentence 1, let. f) GDPR. We seek to show you advertisements that are of interest to you, to make our website more interesting to you and to obtain a fair calculation of advertising costs. The maximum storage period at Google is eighteen months. To find out more about data protection at Google, please see: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can avoid treatment in different ways:
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers;
by disabling cookies for conversion tracking by configuring your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.fr/settings/ads. This setting is removed when you delete your cookies;
by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers at the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent;
by opening the browser used in "private mode" to prevent the use of cookies;
by disabling interest-based advertisements from providers that are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is removed when you delete your cookies.
Google Remarketing
In addition to Adwords Conversion, we use the Google Remarketing application from Google. This is a procedure on which we would like to speak to you again. Through this application, you can see our advertisements after visiting our website the next times you use the Internet. To do this, we use cookies stored in your browser and used by Google to record and evaluate your user behavior when visiting various websites. In this way, Google can determine your previous visit to our website. According to Google's own statements, the data collected in the context of remarketing is not combined with your personal data, which may be processed by Google. According to Google, pseudonymization is used in particular for remarketing.
The legal basis for the processing is Art. 6 para. 1, sentence 1, let. f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can opt out of this tracking process in a number of ways:
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers;
by disabling cookies for conversion tracking by configuring your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.fr/settings/ads. This setting is removed when you delete your cookies;
by disabling interest-based advertisements from providers that are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is removed when you delete your cookies.
by opening the browser used in "private mode" to prevent the use of cookies;
by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers at the link https://www.google.com/settings/ads/plugin.
BingAds
We use the conversion and tracking tool Bing Ads from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, hereinafter "Microsoft") on our website.
Microsoft stores a cookie on the user's computer to enable an analysis of the use of our online offer. The prerequisite is that the user has reached our website via an advertisement from Microsoft Bing Ads. Microsoft and we can thus recognize that someone has clicked on an ad, been redirected to our online offer and has reached a predetermined target page. We only know the total number of users who clicked on a Bing ad and were then redirected to the target page (conversions). No IP address is recorded.
Thanks to the marketing tools used, your browser automatically establishes a direct connection with the Microsoft server. We have no influence on the scope and further processing of the data resulting from the use of Bing Ads. Microsoft has submitted to the Privacy Shield agreement between the European Union and the United States (https://www.privacyshield.gov/EU-US-Framework) and thus offers a guarantee of compliance with European legislation in matters of data protection. You can find Microsoft's certification at https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK.
The legal basis for processing your data is Art. 6 para. 1, sentence 1, let. f) GDPR. We have no knowledge of the storage period at Microsoft and have no influence on it. Further information on data protection at Microsoft can be found at: https://privacy.microsoft.com/en-us/privacystatement.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not continue to process your data unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and to exercise or defend legal claims (Art. 21 (1) GDPR). You can inform us of your opposition via the contact details mentioned in the “Responsible service provider” section.
You can object to the processing in different ways:
by setting your browser software accordingly, in particular by deleting third-party cookies, you will not receive any advertising from third-party providers, or
by opening the browser used in "private mode" to prevent the use of cookies or
off iving interest-based advertisements from providers who are part of the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices. This setting is removed when you delete your cookies.
TreeMates – “One-Click-Planting”
In our checkout process, we have implemented a plugin from TreeMates (Verein für Klimaschutz im E-Commerce (Association for Climate Protection in E-Commerce), Popelkaring 178, 8045 Graz, hello@treemates.net) to allow you to participate in the tree planting campaign. In order to be able to display and carry out the tree planting campaign for you, we, together with TreeMates and its subcontractor, process your contact details, such as your name, surname and e-mail address, as well as the data provided in the "Access data" section.
After you fund a tree planting by activating the checkbox in our checkout process for €2, which you pay alongside your current order, we send our partner TreeMates an order per HTTP request through our software of shop. In doing so, we pass on your details for the creation of your personalized TreeMates certificate. The tree is then planted by TreeMates and its partners. Payment of fees is sent directly to us. After making your donation, you will automatically receive a link via email from TreeMates to your personalized TreeMates certificate. In order to be able to assign the donation to your order, we take note of your participation in the donation campaign and save it together with your other information about the ordering process. We do not process your data further as part of the tree planting campaign. We also do not use automated decision making. If you have any questions regarding the tree planting campaign, please contact TreeMates directly.
The processing of data, in particular the transmission of your contact details to TreeMates, takes place for the purpose of carrying out the tree planting campaign (planting of a tree by partner organizations of TreeMates and issuance of a personalized certificate by TreeMates) and thus fulfill contractual objectives. TreeMates itself engages TRONIC Innovation GmbH (Stiftingtalstraße 60, 8010 Graz, info@tronic-i.com) as a subcontractor to support TreeMates in the field of IT; particularly with regard to the programming interface (API), the setting up and administration of the donations database and the issuance of certificates. The legal basis for data processing is Art. 6 para. 1 let. b) GDPR. The provision of your data is necessary for the execution of the contract. Otherwise, you cannot participate in the tree planting campaign.
We keep your personal data for as long as it is necessary for the tree planting campaign. As a general rule, we delete your personal data as soon as it is no longer necessary for the aforementioned purposes and unless otherwise provided by the law. In particular, we keep your personal data for as long as we need it to assert legal claims or to defend ourselves against any legal action. The data is deleted by TreeMates or its subcontractor after the automated and personalized generation of your certificate and after it has been transmitted to you as the tree donor. If you do not upload your certificate, your data will be automatically anonymized after 3 months. The data is therefore available for a maximum of 3 months before being erased to allow new personalized duplications of the certificate. After this time has elapsed, the only possibility is to generate a non-personalized certificate. For further information on the storage period and data protection of TreeMates, please click on the following link https://www.treemates.net/datenschutzerklaerung/.
Information on data protection Pinterest Ads
The tracking technology of Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter referred to as "Pinterest") is integrated into our website. “Pinterest” collects through technologies such as “tracking pixels” (“Pinterest pixels” and “Pinterest tag”), “cookies” and “device fingerprinting” information about user behavior on our website. Thus, users of the website and users of “Pinterest” who belong to a comparable target group can receive advertisements based on their interests when they visit the social network “Pinterest”. Using “Pinterest pixels” and “Pinterest tags” (small graphics which are also integrated into our Internet site and and which are automatically loaded when our website is accessed and which allow user behavior to be tracked), the user's browser automatically establishes a direct connection to the "Pinterest" server. By integrating "Pinterest pixels" and "Pinterest tags", "Pinterest" uses the information generated by the "cookies" about the use of our website by the user's device, for example, that a certain website has been visited, and processes access data, in particular IP address, browser information, previously visited website and date and time of the server request, in order to deliver personalized advertisements on devices. Data from advertising campaigns enables us to determine the success of individual advertising measures. These advertising media are provided by “Pinterest” via “ad servers”. For this purpose, we use "ad server cookies" through which certain reach measurement parameters, for example the display of advertisements, viewing time or user clicks, can be measured. If users are registered with a service of "Pinterest", "Pinterest" can also assign the collected information to the respective "Pinterest account" of the user. The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1, phrase. 1 let. a) GDPR. "Pinterest" also processes your data in the United States. There is no adequacy decision for the transfer of data to the United States; the legal basis for the transfer to the USA is your consent pursuant to Art. 49, par. 1, phrase. 1 let. a) GDPR. The maximum storage period for “Pinterest” is 30 days. For further information on data protection and storage duration relating to "Pinterest", please see: https://policy.pinterest.com/en/privacy-policy and https://policy.pinterest.com /en/cookies.
You can revoke your consent to processing and transfer to third countries at any time by moving the slider back in the “Settings” [link] of the consent tool. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation.
Pinterest Custom Audiences
We also use Pinterest's "Custom Audiences" online marketing tool. The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter referred to as "Pinterest"). We can thus display personalized advertising to customers who have a Pinterest account when they use the social network. For this purpose, we send our own pseudonymised customer data records to “Pinterest” without direct reference to a specific person, in encrypted form, for data enrichment and the formation of segments (target groups) for media placement advertisers. In addition, target groups are created based on the interaction with our advertisements. The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1, phrase. 1 let. a) GDPR. "Pinterest" also processes your data in the United States. The legal basis for transmission to the USA is your consent pursuant to Art. 49, par. 1, phrase. 1 let. a) GDPR. There is no adequacy decision for the transfer of data to the United States. For further information on data protection and storage duration relating to "Pinterest", please see: https://policy.pinterest.com/en/privacy-policy
You can revoke your consent to processing and transfer to third countries at any time by sending us a message to the contact details mentioned in the “Responsible Provider” section. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation.
Linkster data protection information (analysis and range measurement)
We use tracking technology from Linkster GmbH, Geschwister-Scholl-Straße 52, 20251 Hamburg, Germany.
Technologies such as "cookies", "tracking pixels" and "device fingerprinting" are used to track specific user behavior, measure the reach of our advertisements and attribute the success of an advertising medium. The data relating to the advertising campaigns allow us to determine the success of the various advertising measures within the scope of the respective partner program. In addition, this information allows us to attribute advertising successes for billing purposes with the corresponding advertising partners.
Information stored on user terminals is also processed.
When you click on an advertising integration, for example on a link in a story of one of our influencers, cookies are placed in your browser which are read in the event of a transaction. Information about your behavior in using our website is collected by means of web beacons (web beacons), with which your browser automatically establishes a direct connection to the “Linkster” server. This information includes information generated by your terminal about interactions with our advertising media (for example, clicks on an advertising medium) and the data mentioned in the "Use of our website" section, in particular the URL of the website on which the advertising medium is placed (referrer URL), the browser identifier (user agent) of your terminal (including information on the type of device and the operating system), the IP address of the terminal, shortened of the last three digits then hashed, the HTTP header (data packet containing various technical information automatically transmitted by your browser), the time of the request and, if it has already been stored on the terminal, the cookie with its content, in particular the 24-digit ID and information on the last points of contact (i.e. when certain advertising material was displayed or clicked on by a terminal). This information is encrypted and stored in our database on the Linkster server. In the case of a product purchase, the order number and the basket value of the order as well as, where applicable, the “new customer” characteristic are also processed.
The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1, phrase. 1 let. a) GDPR.
The storage period for processing within the framework of "Linkster" is 30 days. Further information on data protection can be found at: https://linkster.co/datenschutz/ . You can consult the data processed by Linkster at: https://trck.linkster.co/privacy-mydata.do.
TikTok Ads
The tracking technology of TikTok Technology Limited, 10 Earlsfort Terrace Dublin, D02 T380, Ireland (hereinafter referred to as “TikTok”) is integrated into the website. “TikTok” collects through technologies such as “tracking pixels” (“TikTok pixels”), “cookies” and “device fingerprinting” information about user behavior on our website. Thus, users of the website and users of “TikTok” may receive advertisements based on their interests when they consult the social network “TikTok”. Using "TikTok pixels" (small graphics which are also integrated into our website and which are automatically loaded when our website is accessed and which allow user behavior to be tracked), the user's browser automatically establishes a connection directly with the “TikTok” server. By integrating the "TikTok pixels", "TikTok" uses the information generated by the "cookies" about the use of our website by the user's device, for example, that a certain website has been visited, and processes access data, in particular the IP address, browser information, previously visited website and date and time of the server request, in order to deliver personalized advertisements to the devices. Data from advertising campaigns enables us to determine the success of individual advertising measures. These advertising media are provided by “TikTok” through “ad servers”. For this purpose, we use “ad server cookies” through which certain reach measurement parameters, e.g. display of advertisements, viewing time or user clicks, can be measured. If users are registered with a service of “TikTok”, “TikTok” may also assign the collected information to the respective “TikTok account” of the user. The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1, phrase. 1 let. a) GDPR. “TikTok” also processes your data in China and the United States. No adequacy decision exists for the transfer of data to China or the United States; the legal basis for the transfer to China is your consent under Art. 49, par. 1, phrase. 1 let. a) GDPR. For further information on data protection and storage duration relating to “TikTok”, please see: https://www.tiktok.com/legal/privacy-policy?lang=en.
TikTok Custom Audiences
We also use the tool of my“Custom Audiences” online marketing from “TikTok”. The provider is TikTok Technology Limited, 10 Earlsfort Terrace Dublin, D02 T380, Ireland (hereinafter referred to as: “TikTok”). We can thus display personalized advertising to customers who have a TikTok account when they use the social network. For this purpose, we send our own pseudonymised customer data records to “TikTok” without direct reference to a specific person, in encrypted form, for data enrichment and the formation of segments (target groups) for media placement advertisers. In addition, target groups are created based on the interaction with our advertisements. The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1, phrase. 1 let. a) GDPR; otherwise, the legal basis is Art. 6 para. 1, phrase. 1 let. f) GDPR. Our legitimate interests are to display personalized advertising to existing customers. “TikTok” also processes your data in China and the United States. No adequacy decision exists for the transfer of data to China or the United States. For further information on data protection and storage duration relating to “TikTok”, please see: https://www.tiktok.com/legal/privacy-policy?lang=en.
You can revoke your consent to processing and transfer to third countries at any time by sending us a message to the contact details mentioned in the “Responsible Provider” section. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation. You can object to the processing if it is based on Art. 6 para. 1, phrase. 1 let. f) GDPR. Your right to object exists for reasons arising from your specific situation. You can inform us of your opposition via the contact details mentioned in the section “Responsible service provider”.
**Klar! Insights - Attribution** We use the services of Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany, a SaaS provider for business intelligence solutions for eCommerce companies. Klar Insights GmbH collects, processes, and stores data (user and session IDs, IP address, online identifiers (cookie ID, device ID)) on this website and its subpages for reach measurement and statistical analysis on our behalf. For this purpose, we have concluded a data processing agreement with Klar Insights GmbH. The collection of personal data is based on the legal basis of consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR. If consent is given by the user, the data to be processed is collected in a user-related manner, taking into account § 25 para. 1 sentence 1 TDDDG. For the aforementioned different types of collection, the following cookies are used to ensure the respective type of collection: september_id september_has_consent september_do_not_track (in case of objection) **Cookie - Objection** To generally object to the use of Klar! Insights, please use this [Link](https://2437280041.hellobody.eu/donottrack/me). This will set a cookie with the name "september_do_not_track" from the domain "hellobody.eu". Please do not delete this, otherwise it cannot be guaranteed that you will not be tracked by Klar. Information on data protection and data use by Klar can be found on the following website: [https://app.getklar.com/legal/data-protection](https://app.getklar.com/legal/data-protection)