Politique de confidentialité
1. Un aperçu de la protection des données
informations générales
Les informations suivantes vous fourniront un aperçu facile à naviguer de ce qu'il adviendra de vos données personnelles lorsque vous visitez ce site Web. Le terme « données personnelles » comprend toutes les données qui peuvent être utilisées pour vous identifier personnellement. Pour des informations détaillées sur le sujet de la protection des données, veuillez consulter notre déclaration de protection des données, que nous avons incluse sous cette copie.
Enregistrement des données sur ce site Web
Qui est la partie responsable de l'enregistrement des données sur ce site Web (c'est-à-dire le « contrôleur ») ?
Les données de ce site Web sont traitées par l'exploitant du site Web, dont les coordonnées sont disponibles dans la section « Informations sur la partie responsable (appelée « responsable du traitement » dans le RGPD) » dans la présente politique de confidentialité.
Comment enregistrons-nous vos données ?
Nous collectons vos données à la suite de votre partage de vos données avec nous. Il peut s'agir, par exemple, d'informations que vous saisissez dans notre formulaire de contact.
D'autres données seront enregistrées par nos systèmes informatiques automatiquement ou après que vous ayez consenti à leur enregistrement lors de votre visite sur le site. Ces données comprennent principalement des informations techniques (par exemple, navigateur Web, système d'exploitation ou heure d'accès au site). Ces informations sont enregistrées automatiquement lorsque vous accédez à ce site.
À quelles fins utilisons-nous vos données ?
Une partie des informations est générée pour garantir la mise à disposition sans erreur du site Web. D'autres données peuvent être utilisées pour analyser vos habitudes d'utilisation.
De quels droits disposez-vous en ce qui concerne vos informations ?
Vous avez le droit de recevoir des informations sur la source, les destinataires et les finalités de vos données personnelles archivées à tout moment sans avoir à payer de frais pour de telles divulgations. Vous avez également le droit d'exiger que vos données soient rectifiées ou supprimées. Si vous avez consenti au traitement des données, vous avez la possibilité de révoquer ce consentement à tout moment, ce qui affectera tout traitement futur des données. De plus, vous avez le droit d'exiger que le traitement de vos données soit limité dans certaines circonstances. En outre, vous avez le droit de déposer une plainte auprès de l'organisme de contrôle compétent.
N'hésitez pas à nous contacter à tout moment si vous avez des questions à ce sujet ou sur tout autre problème lié à la protection des données.
Outils d'analyse et outils fournis par des tiers
Il est possible que vos habitudes de navigation soient analysées statistiquement lors de votre visite sur ce site Web. De telles analyses sont effectuées principalement avec ce que nous appelons des programmes d'analyse.
Pour des informations détaillées sur ces programmes d'analyse, veuillez consulter notre déclaration de protection des données ci-dessous.
2. Hébergement
Hébergement externe
Ce site Internet est hébergé par un prestataire externe (hébergeur). Les données personnelles collectées sur ce site sont stockées sur les serveurs de l'hébergeur. Celles-ci peuvent inclure, sans s'y limiter, les adresses IP, les demandes de contact, les métadonnées et les communications, les informations contractuelles, les informations de contact, les noms, l'accès aux pages Web et d'autres données générées via un site Web.
L'hébergeur est utilisé dans le but de remplir le contrat avec nos clients potentiels et existants (article 6, paragraphe 1, point b) du RGPD) et dans l'intérêt d'une fourniture sécurisée, rapide et efficace de nos services en ligne par un fournisseur professionnel ( Article 6(1)(f) du RGPD).
Notre hébergeur ne traitera vos données que dans la mesure nécessaire pour remplir ses obligations de performance et pour suivre nos instructions concernant ces données.
Nous utilisons l'hébergeur suivant :
Profihost GmbH
Place de l'Expo 1
30539 Hanovre
Traitement de l'information
Nous avons conclu un accord de traitement des données (DPA) avec le fournisseur susmentionné. Il s'agit d'un contrat mandaté par les lois sur la protection des données qui garantit qu'ils traitent les données personnelles des visiteurs de notre site Web uniquement sur la base de nos instructions et conformément au RGPD.
3. Informations générales et informations obligatoires
Protection des données
Les exploitants de ce site Web et de ses pages prennent très au sérieux la protection de vos données personnelles. Par conséquent, nous traitons vos données personnelles en tant qu'informations confidentielles et conformément aux réglementations légales en matière de protection des données et à la présente déclaration de protection des données.
Chaque fois que vous utilisez ce site Web, diverses informations personnelles sont collectées. Les données personnelles comprennent les données qui peuvent être utilisées pour vous identifier personnellement. Cette déclaration de protection des données explique quelles données nous collectons ainsi que les finalités pour lesquelles nous utilisons ces données. Il explique également comment et dans quel but les informations sont collectées.
Nous vous informons par la présente que la transmission de données via Internet (c'est-à-dire via des communications par e-mail) peut être sujette à des failles de sécurité. Il n'est pas possible de protéger complètement les données contre l'accès de tiers.
Informations sur la partie responsable (appelée « responsable du traitement » dans le RGPD)
Le responsable du traitement des données sur ce site Internet est :
boho möbelwerkstatt GmbH
Rue de l'Industrie 45
33397 Rietberg
Vertreten durch den Geschäftsführer Gregor Hoffmann
Téléphone : +49 5244 9789030
E-mail: kundenservice@boho-moebel.de
Le responsable du traitement est la personne physique ou morale qui, seule ou conjointement avec d'autres, prend des décisions concernant les finalités et les ressources du traitement des données personnelles (par exemple, les noms, les adresses e-mail, etc.).
Durée de stockage
Sauf si une période de stockage plus spécifique a été spécifiée dans cette politique de confidentialité, vos données personnelles resteront avec nous jusqu'à ce que la finalité pour laquelle elles ont été collectées ne s'applique plus. Si vous faites valoir une demande justifiée de suppression ou révoquez votre consentement au traitement des données, vos données seront supprimées, à moins que nous n'ayons d'autres raisons légalement autorisées pour stocker vos données personnelles (par exemple, périodes de conservation du droit fiscal ou commercial) ; dans ce dernier cas, la suppression interviendra après que ces motifs auront cessé de s'appliquer.
Informations sur le transfert de données vers les États-Unis et d'autres pays non membres de l'UE
Entre autres, nous utilisons des outils d'entreprises domiciliées aux États-Unis ou autres du point de vue de la protection des données non sécurisées de pays non membres de l'UE. Si ces outils sont actifs, vos données personnelles peuvent potentiellement être transférées vers ces pays hors UE et peuvent y être traitées. Il faut souligner que dans ces pays, un niveau de protection des données comparable à celui de l'UE ne peut être garanti. Par exemple, les entreprises américaines ont pour mandat de divulguer des données personnelles aux agences de sécurité et vous, en tant que personne concernée, n'avez aucune possibilité de litige pour vous défendre devant les tribunaux. Par conséquent, il ne peut être exclu que des agences américaines (par exemple, les services secrets) puissent traiter, analyser et archiver de manière permanente vos données personnelles à des fins de surveillance. Nous n'avons aucun contrôle sur ces activités de traitement.
Révocation de votre consentement au traitement des données
Un large éventail de transactions de traitement de données ne sont possibles que sous réserve de votre consentement exprès. Vous pouvez également révoquer à tout moment tout consentement que vous nous avez déjà donné. Ceci est sans préjudice de la licéité de toute collecte de données qui a eu lieu avant votre révocation.
Droit de s'opposer à la collecte de données dans des cas particuliers ; droit de s'opposer à la publicité directe (art. 21 RGPD)
DANS LE CAS O LES DONNÉES SONT TRAITÉES SUR LA BASE DE L'ART. 6(1)(E) OU (F) du RGPD, VOUS AVEZ LE DROIT DE VOUS OPPOSER À TOUT MOMENT AU TRAITEMENT DE VOS DONNÉES PERSONNELLES POUR DES MOTIFS DÉCOULANT DE VOTRE SITUATION UNIQUE. CECI S'APPLIQUE ÉGALEMENT À TOUT PROFILAGE BASÉ SUR CES DISPOSITIONS. POUR DÉTERMINER LA BASE JURIDIQUE SUR LAQUELLE TOUT TRAITEMENT DE DONNÉES EST BASÉ, VEUILLEZ CONSULTER CETTE DÉCLARATION DE PROTECTION DES DONNÉES. SI VOUS ENREGISTREZ UNE OBJECTION, NOUS NE TRAITERONS PLUS VOS DONNÉES PERSONNELLES CONCERNÉES, SAUF SI NOUS SOMMES EN POSITION DE PRÉSENTER DES MOTIFS IMPERATIFS DIGNES DE PROTECTION POUR LE TRAITEMENT DE VOS DONNÉES, QUI L'EMPORTENT SUR VOS INTÉRÊTS, DROITS ET LIBERTÉS OU SI LE BUT DU TRAITEMENT EST LA RÉCLAMATION, L'EXERCICE OU LA DÉFENSE DE DROITS JURIDIQUES (OPPOSITION EN VERTU DE L'ART. 21(1) RGPD).
SI VOS DONNÉES PERSONNELLES SONT TRAITÉES AFIN DE VOUS ENGAGER DANS LA PUBLICITÉ DIRECTE, VOUS AVEZ LE DROIT DE VOUS OPPOSER AU TRAITEMENT DE VOS DONNÉES PERSONNELLES CONCERNÉES AUX FINS DE CETTE PUBLICITÉ À TOUT MOMENT. CELA S'APPLIQUE ÉGALEMENT AU PROFILAGE DANS LA MESURE QU'IL EST AFFILIÉ À CETTE PUBLICITÉ DIRECTE. SI VOUS VOUS OPPOSEZ, VOS DONNÉES PERSONNELLES NE SERONT PLUS UTILISÉES À DES FINS DE PUBLICITÉ DIRECTE (OBJECTION EN VERTU DE L'ART. 21(2) RGPD).
Droit d'enregistrer une réclamation auprès de l'organisme de contrôle compétent
En cas de violation du RGPD, les personnes concernées ont le droit de déposer une plainte auprès d'un organisme de contrôle, en particulier dans l'État membre où elles ont habituellement leur domicile, leur lieu de travail ou le lieu où la violation alléguée s'est produite. Le droit d'enregistrer une plainte est en vigueur indépendamment de toute autre procédure administrative ou judiciaire disponible en tant que recours légal.
Droit à la portabilité des données
Vous avez le droit d'exiger que toutes les données que nous traitons automatiquement sur la base de votre consentement ou afin d'exécuter un contrat vous soient remises à vous ou à un tiers dans un format couramment utilisé et lisible par machine. Si vous devez exiger le transfert direct des données à un autre responsable du traitement, cela ne sera fait que si cela est techniquement possible.
Cryptage SSL et/ou TLS
Pour des raisons de sécurité et pour protéger la transmission de contenus confidentiels, tels que les bons de commande ou les demandes de renseignements que vous nous soumettez en tant qu'exploitant du site Web, ce site Web utilise un programme de cryptage SSL ou TLS. Vous pouvez reconnaître une connexion cryptée en vérifiant si la ligne d'adresse du navigateur passe de « http:// » à « https:// » et également par l'apparition de l'icône de verrouillage dans la ligne du navigateur.
Si le cryptage SSL ou TLS est activé, les données que vous nous transmettez ne peuvent pas être lues par des tiers.
Transactions de paiement cryptées sur ce site Web
Si vous êtes dans l'obligation de partager vos informations de paiement (par exemple, votre numéro de compte si vous nous autorisez à débiter votre compte bancaire) avec nous après avoir conclu un contrat à honoraires avec nous, cette information
Consent with Cookiebot
Our website uses consent technology from Cookiebot to obtain your consent to the storage of certain cookies on your end device or for the use of certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you enter our website, a connection is established with the Cookiebot servers to obtain your consent and provide you with other explanations regarding the use of cookies. Cookiebot will then store a cookie in your browser to identify the consent you have given or its revocation. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie itself or the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
- The type and version of browser used
- The used operating system
- Referrer URL
- The hostname of the accessing computer
- The time of the server inquiry
- The IP address
This data is not merged with other data sources.
This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.
Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested.
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.
Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.
These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained.
The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Registration on this website
You have the option to register on this website to be able to use additional website functions. We shall use the data you enter only for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise, we shall reject the registration.
To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided during the registration process.
We shall process the data entered during the registration process on the basis of your consent (Art. 6(1)(a) GDPR).
The data recorded during the registration process shall be stored by us as long as you are registered on this website. Subsequently, such data shall be deleted. This shall be without prejudice to mandatory statutory retention obligations.
Registration with Google
Instead of registering directly on this website, you can register with Google. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To register with Google, you must only enter your Google name and password. Google will identify you and confirm your identity to our website.
When you sign in with Google, we may be able to use certain information in your account to complete your profile with us. You decide whether you want this information to be used and if so, which information it is, within the framework of your Google security settings, which you can find here: https://myaccount.google.com/security and https://myaccount.google.com/permissions.
The data processing associated with Google’s registration is based on our legitimate interest in making the registration process as simple as possible for our users (Art. 6(1)(f) GDPR). Since the use of the registration function is voluntary and the users themselves can decide on the respective access options, no conflicting predominant rights of the data subjects are apparent.
Registration with Apple
The “Sign in with Apple” option is designed to provide a sign-in environment that preserves your privacy and is protected by security technologies built into Apple products.
- “Sign in with Apple” allows you to sign in to apps and websites while maintaining your privacy.
- Some developers may ask for your name, which you can change. They may also ask for your email address, which you can pass on directly or use an alias.
- Apple knows that you've turned on “Sign in with Apple” for an app or website, but doesn't keep track of which apps or websites you sign in to or when.
- When you first sign in to an app using Sign In with Apple, Apple uses information about your account and your experience with Apple, along with information about your device and device usage patterns, to prevent fraud.
- For more information on logging in through Apple, visit: https://support.apple.com/en-us/HT210699
The comment function on this website
When you use the comment function on this website, information on the time the comment was generated and your e-mail-address and, if you are not posting anonymously, the username you have selected will be archived in addition to your comments.
Storage period for comments
Comments and any affiliated information shall be stored by us and remain on this website until the content the comment pertained to has been deleted in its entirety or if the comments had to be deleted for legal reasons (e.g., insulting comments).
Legal basis
Comments are stored on the basis of your consent (Art. 6(1)(a) GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
5. Analysis tools and advertising
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If the relevant consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
This analysis tool is used on the basis of Art. 6(1)(f) GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g., an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Google Analytics E-Commerce-Tracking
This website uses the “E-Commerce Tracking” function of Google Analytics. With the assistance of E-Commerce Tracking, the website operator is in a position to analyze the purchasing patterns of website visitors with the aim of improving the operator’s online marketing campaigns. In this context, information, such as the orders placed, the average order values, shipping costs and the time from viewing the product to making the purchasing decision are tracked. These data may be consolidated by Google under a transaction ID, which is allocated to the respective user or the user’s device.
Archiving period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. For details, please click the following link: https://support.google.com/analytics/answer/7667196?hl=en
Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of Google Ads is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyzes your user patterns on our website (e.g., clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).
Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a manner tailored to you as well as on any of your devices (e.g., tablet or PC).
If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.
The use of Google Remarketing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the marketing of the operator’s products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.
For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.
We use Google Conversion Tracking on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g., concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en
Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick.
To be able to display interest adequate promotional content to users, DoubleClick must recognize the respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g., device fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the respective user can be shown interest adequate advertising.
The use of Google DoubleClick takes place in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If a corresponding agreement has been requested (e.g., an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.
For further information on how to object to the advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.
6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter we use newsletter service providers, which are described below.
Cleverreach
This website uses Cleverreach for the sending of newsletters. The provider is the Cleverreach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.
Cleverreach services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on Cleverreach’s servers in Europe.
Data analysis by Cleverreach
Cleverreach enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to determine, which links drew an extraordinary number of clicks.
Moreover, we are also able to see whether once the e-mail was opened or a link was clicked, any previously defined actions were taken (conversion rate). This allows us to determine whether you have made a purchase after clicking on the newsletter.
Cleverreach also enables us to divide the subscribers to our newsletter into various categories (i.e., to “cluster” recipients). For instance, newsletter recipients can be categorized based on age, gender, or place of residence. This enables us to tailor our newsletter more effectively to the needs of the respective target groups.
If you do not want to permit an analysis by Cleverreach, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.
For detailed information on the functions of Cleverreach please follow this link: https://www.cleverreach.com/en-de/newsletter-tool/.
Legal basis
The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
Storage period
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Regulations of Cleverreach at: https://www.cleverreach.com/en-de/privacy-policy/.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
7. Plug-ins and Tools
YouTube
This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.
8. eCommerce and payment service providers
Processing of data (customer and contract data)
We collect, process, and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process, and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them.
The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.
Data transfer upon closing of contracts for online stores, retailers, and the shipment of merchandise
We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with companies entrusted with the shipment of goods or the financial institution tasked with the processing of payments. Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.
Payment services
We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) are processed by the payment service provider for the purpose of payment processing. For these transactions, the respective contractual and data protection provisions of the respective providers apply. The use of the payment service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.
We use the following payment services / payment service providers within the scope of this website:
Amazon Pay
The provider of this payment service is Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg.
Details regarding the use of your data can be found in Amazon Pay’s Privacy Policy at the following link: https://pay.amazon.de/help/201212490?ld=APDELPADirect.
Mollie
The provider of this payment service is Mollie B.V, Keizersgracht 126, 1015CW Amsterdam, Netherlands (hereinafter "Mollie"). With the help of Mollie, we can integrate various payment methods on our website. Details can be found in Mollie's privacy policy: https://www.mollie.com/de/privacy.