1) Introduction and contact details of the controller

1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 Controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is OMGN GmbH, Johannes-Brahms-Str. 4, 72461 Albstadt, Germany, Tel.: +49 177 4056228 (used exclusively for WhatsApp support), Email: info@omgn.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect such data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data which is technically necessary for us to display the website to you:

The website you visited
Date and time at the time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used otherwise. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Shopify

We use the system of the following provider for hosting our website and the display of page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

When transferring data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted when you close the browser (so-called "session cookies"); some remain on your device longer and allow saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data are also processed by individual cookies we use, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser so that you are informed about the setting of cookies and decide individually on acceptance or exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Zendesk

This website uses a live chat system from the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.

The processing of personal data transmitted via the chat takes place either in accordance with Art. 6 para. 1 lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in effectively serving our site visitors. Your data transmitted in this way will be deleted subject to any statutory retention periods when the matter concerned has been finally clarified.

In addition, pseudonymized usage profiles may be created using cookies, whereby further information is collected and evaluated, which is not used for your personal identification and is not merged with other data sets. If this information relates to a person, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. The functionality of our website may then be restricted. You can object to the data collection and storage for the purpose of creating a pseudonymized usage profile at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

5.2 Loox

We use the services of the following provider for review reminders: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel.

Only on the basis of your explicit consent according to Art. 6 para. 1 lit. a GDPR do we transmit your email address and possibly other customer data to the provider so that they can contact you by email with a review reminder.

You can withdraw your consent at any time with effect for the future towards us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

An adequate level of data protection is ensured by an adequacy decision of the European Commission when transferring data to the provider's location.

5.3 Trustpilot

We use the services of the following provider for review reminders: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

Only on the basis of your explicit consent according to Art. 6 para. 1 lit. a GDPR do we transmit your email address and possibly other customer data to the provider so that they can contact you by email with a review reminder.

You can withdraw your consent at any time with effect for the future towards us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

5.4 Zendesk

We use the email ticketing system of the following provider for processing customer inquiries: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.

If you send contact inquiries by email via our website, they are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can always view the current status of the processing of your concern via the individually assigned ticket number.

Personal data are collected, transmitted to the provider, stored and read there for the organization and processing of inquiries according to the extent of their provision, but at least name, first name and email address.

The legal basis for processing this data is our legitimate interest in efficiently designing our customer service, in timely processing of your concern and optimizing our service offering pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

5.5 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the so-called "business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (e.g. an order), we store and use the mobile number you use on WhatsApp and – if provided – your first and last name according to Art. 6 para. 1 lit. b GDPR for processing and answering your concern. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your inquiry to a specific case.

If you use our WhatsApp contact for general inquiries (e.g. about services, availability, or our website), we store and use the mobile number you use on WhatsApp and – if provided – your first and last name according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.

Your data will only be used to answer your concern via WhatsApp. No data will be passed on to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device used by us and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For operating our WhatsApp Business account, we use a mobile device whose address book contains only WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that any person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts upon first use of the app on their device by accepting the WhatsApp terms of use in accordance with Art. 6 para. 1 lit. a GDPR. The transmission of data of users who do not use WhatsApp and/or who have not contacted us via WhatsApp is excluded accordingly.

Purpose and extent of data collection as well as further processing and use of data by WhatsApp and your rights and settings options regarding privacy protection can be found in the data privacy information of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider to protect the data of our site visitors and prohibit any forwarding to third parties.

Within the aforementioned processing, data transmissions to servers of Meta Platforms Inc. in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

5.6 When contacting us (e.g. via contact form or email), personal data are processed exclusively for the purpose of handling and answering your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in answering your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if the circumstances show that the matter has been conclusively clarified and if no legal retention obligations oppose this.

6) Comment function

When using the comment function on this website, in addition to your comment, information about the time of the comment and the name you selected as commentator will also be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts unlawful content by a comment. We need your email address to be able to contact you if a third party complains about your published content as unlawful.

The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are complained about as unlawful.

7) Data processing when opening a customer account

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data is collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required can be found in the input mask of the relevant form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned controller. After deletion of your customer account, your data will be deleted provided all contracts concluded through it are fully completed, no legal retention periods conflict, and we have no legitimate interest in further storage.

8) Use of customer data for direct advertising

8.1 Registration for our email newsletter

If you register for our email newsletter, we regularly send you information about our offers. The mandatory indication for sending the newsletter is your email address alone. The information of further data is voluntary and is used to personally address you. We use the so-called double opt-in procedure for sending the newsletter to ensure that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We save the IP address assigned by your Internet Service Provider (ISP) and the date and time of registration to be able to trace possible misuse of your email address later. The data collected by us when registering for the newsletter is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by a corresponding message to the above-mentioned controller. After unsubscription, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve further data use that is legally permitted and about which we inform you in this statement.

8.2 Sending the email newsletter to existing customers

If you have provided your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range of products by email. According to Section 7 para. 3 UWG, we do not have to obtain a separate consent from you for this. The data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we do not send mails.

You have the right to object to the use of your email address for advertising purposes at any time with effect for the future by sending a message to the controller named at the beginning. Only transmission costs according to base tariffs apply. After receipt of your objection, we will stop using your email address for advertising purposes immediately.

8.3 Klaviyo

The sending of our email newsletters and other advertising email communication is carried out via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.

Based on our legitimate interest in effective and user-friendly email marketing, we pass on the data you provided during registration pursuant to Art. 6 para. 1 lit. f GDPR to this provider to send the mails on our behalf.

Subject to your explicit consent according to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of mail campaigns by means of web beacons or tracking pixels within the emails sent, which can measure open rates and specific interactions with the contents of the newsletter. Device information (e.g. time of access, IP address, browser type, operating system) is collected and evaluated, but not merged with other data sets.

You can revoke your consent to mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider to protect the data of our site visitors and prohibit unauthorized disclosure to third parties.

For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

8.4 Shopify Email

The sending of our email newsletters is carried out via this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide during newsletter registration pursuant to Art. 6 para. 1 lit. f GDPR to this provider so that they send the newsletters on our behalf.

Subject to your explicit consent according to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of newsletter campaigns by means of web beacons or tracking pixels within the emails sent, which can measure open rates and specific interactions with the contents of the newsletter. Device information (e.g. time of access, IP address, browser type, operating system) is collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider to protect the data of our site visitors and prohibit unauthorized disclosure to third parties.

When transmitting data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.5 WhatsApp Newsletter

If you register for our WhatsApp newsletter, we regularly send you information about our offers via WhatsApp. The mandatory indication for sending the newsletter is your mobile number alone.

To send the newsletter, add our provided mobile number to the contacts of your mobile device and send the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent for the use of your personal data under Art. 6 para. 1 lit. a GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.

The data collected when you register for the newsletter are processed exclusively for advertising purposes within the newsletter. You can unsubscribe at any time by sending the message "Stop" via WhatsApp. After unsubscription, your mobile number is immediately deleted from our newsletter distribution list, unless you have expressly consented to further use or we reserve further data use that is legally permitted and about which we inform you in this statement.

Please note that WhatsApp Business has access to the address book of the mobile device used by us and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.

For sending our WhatsApp newsletter, we therefore use a mobile device whose address book contains only the WhatsApp contact details of our newsletter recipients. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to transmission of their WhatsApp phone number from the address books of their chat contacts by accepting the WhatsApp terms of use upon first use of the app on their device in accordance with Art. 6 para. 1 lit. a GDPR. The transmission of data of users who do not use WhatsApp and/or who have not contacted us via WhatsApp is excluded.

Purpose and scope of data collection as well as further processing and use of data by WhatsApp and your rights and setting options regarding privacy protection can be found in the data privacy information of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with WhatsApp which protects the data of our newsletter recipients and prohibits passing on to third parties.

Data transmissions to servers of Meta Platforms Inc. in the USA may occur within the above-mentioned processing.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

8.6 Cart reminders by email

In the event of the abandonment of your purchase before completing the order, you have the option to be reminded once via email of the contents of your virtual shopping cart.

The mandatory indication for sending this reminder is your email address alone. The provision of further data is voluntary and possibly used to address you personally. The mailing is done via the double opt-in procedure, ensuring that you only receive a notification after clicking a verification link sent to the specified email address, expressly confirming consent.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a cart reminder. We store your IP address assigned by ISP and the date and time of registration to trace potential misuse at a later date. The data collected for our email reminder service are strictly used for this purpose.

You can unsubscribe from the cart reminders at any time by sending a corresponding message to the controller named above. After unsubscription, your email is immediately deleted from our distribution list unless you have consented to further use or we reserve further data use that is legally permitted and about which we inform you in this statement.

9) Data processing for order processing

9.1 Transmission of image files for order processing via email

On our website, customers can request product personalization by submitting image files via email. The submitted image serves as a template for personalizing the selected product.

The customer can transmit one or more image files from their device to us via the email address given on the website. We record, store and use the transmitted files exclusively for manufacturing the personalized product as described on our website. If image files are passed on to specific service providers for order fulfillment, you will be informed explicitly in the following paragraphs. No further transfer takes place. If the submitted files or digital motifs contain personal data (especially identifiable persons), all mentioned processing takes place solely for order processing purposes pursuant to Art. 6 para. 1 lit. b GDPR.

After concluding the order, the transmitted image files are automatically and completely deleted.

9.2 Transmission of image files for order processing via messaging function

If the customer can request product personalization by submitting image files via messaging functionality, the submitted image serves as a template for personalizing the selected product.

Via the existing messaging function, the customer can transmit one or more image files from the device to us. We record, store and use the transmitted files exclusively for manufacturing the personalized product as described in our service descriptions.

If image files are passed on to specific service providers for order fulfillment, you will be informed explicitly in the following paragraphs. No further transfer takes place. If the submitted files or digital motifs contain personal data (especially identifiable persons), all mentioned processing takes place solely for order processing purposes pursuant to Art. 6 para. 1 lit. b GDPR.

After concluding the order, the transmitted image files are automatically and completely deleted.

9.3 Transmission of image files for order processing via upload function

On our website, customers have the option to request product personalization by submitting image files through an upload function. The submitted image serves as a template for personalizing the selected product.

Via the upload form on the website, the customer can transmit one or more image files from their device directly by automated, encrypted data transmission to us. We record, store and use the transmitted files exclusively for manufacturing the personalized product as described on our website. If image files are passed on to specific service providers for order fulfillment, you will be informed explicitly in the following paragraphs. No further transfer takes place. If the submitted files or digital motifs contain personal data (especially identifiable persons), all mentioned processing takes place solely for order processing purposes pursuant to Art. 6 para. 1 lit. b GDPR.

After concluding the order, the transmitted image files are automatically and completely deleted.

9.4 If necessary for contract processing for delivery and payment purposes, the personal data collected by us pursuant to Art. 6 para. 1 lit. b GDPR are passed on to the contracted transport company and credit institution.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order to personally inform you under our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details are used strictly for notifications of owed updates and only processed to the extent necessary.

For order processing, we also work with the following service providers who support us wholly or in part in executing contracts. Certain personal data are transmitted to these providers as detailed.

9.5 To fulfill our contractual obligations to customers, we work with external shipping partners. We pass on your name, delivery address, and if necessary for delivery, your phone number solely for delivery purposes pursuant to Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.

9.6 Post & DHL shipping (official)

We use the services of the following provider for shipping preparation: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn.
Pursuant to Art. 6 para. 1 lit. b GDPR, we transmit digital shipping labels with your delivery information exclusively for order processing from our order processing system to the provider, who then sends them to our local printers for printing. Data transfer only takes place as far as necessary.

9.7 Use of payment service providers

- Klarna

One or more online payment methods of the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method for which you pay in advance (e.g. credit card), your payment data provided during the order (including name, address, bank and card details, currency, and transaction number) and information about the order contents are passed on according to Art. 6 para. 1 lit. b GDPR. Data is passed exclusively for payment processing and only to the extent required.

For payment methods where the provider advances payment (e.g. invoicing, installment purchase, direct debit), you are requested during order to provide personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data on alternative means of payment).

To safeguard our legitimate interest in assessing the creditworthiness of our customers, we forward these data for credit checks under Art. 6 para. 1 lit. f GDPR to the provider. The provider assesses based on your personal and other data (shopping cart, invoice amount, order history, payment experiences) whether the selected payment method can be granted considering payment and default risks.

For the decision in the application process, besides internal criteria, identity and credit information from these credit agencies may be included according to Art. 6 para. 1 lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Score values are based on recognized mathematical-statistical methods. Address data are among factors used in calculation.

You can object to this processing of your data at any time by message to us or directly to the provider. However, the provider may remain entitled to process your personal data as necessary for contract-based payment processing.
- Mollie

One or more online payment methods of the following provider are available: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands.

If you select a payment method with advance payment, your data will be passed on for payment processing per Art. 6 para. 1 lit. b GDPR.
- Paypal

One or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Data transfer as described above applies similarly for PayPal.

For payment methods where we advance payment, personal data may be requested and forwarded for credit checks as described.

Credit report procedures and possibilities to object apply similarly.

- Shopify Payments

One or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Payments involving advance payment are handled as described.

- Sofortüberweisung

One or more online payment methods of the following provider are available: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

Payment processings are analogous to the previous descriptions.

10) Online marketing

10.1 Google AdSense

This website uses Google AdSense, a web advertising service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, i.e. text files stored on your computer allowing analysis of website usage. Additionally, Google AdSense uses "web beacons" (small invisible graphics) to collect data on website visitors. Information generated by cookies and/or web beacons (including your IP address) is usually transmitted and stored on Google servers. Transmission to Google LLC servers in the USA may occur.

Google uses this information to evaluate your usage behavior regarding AdSense ads. Your IP address transmitted is not merged with other Google data. Data may be transferred to third parties as required by law or for processing on Google's behalf.
All described processing, especially reading information on your device via cookies and/or web beacons, is only done with your explicit consent per Art. 6 para. 1 lit. a GDPR. Without consent, Google AdSense is not used during your visit.

You may revoke your consent anytime for the future by disabling this service in the website's "Cookie-Consent-Tool".

For data transmission to the USA, the provider has joined the EU-US Data Privacy Framework ensuring EU data protection levels.

Further privacy information from Google can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.2 Goaffpro Affiliate

We participate in the affiliate program of: Oxybit Enterprises Pvt Ltd, 16, Sector 20, Part 1, HUDA, Sirsa, Haryana -125055, India.

Links to offers on provider or third-party ("partner") websites are placed on our site.

For measuring success, cookie-based or similar technologies are used by the provider on partner sites. Processing regularly includes IP and device info.

All processing only occurs with your explicit consent per Art. 6 para. 1 lit. a GDPR and can be revoked anytime in the partner sites cookie consent tools.

11) Web analytics services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics by Google Ireland Limited, a service analyzing your website use.

Standard cookies collect info including your IP address (masked for anonymity). Data is transmitted to Google servers, possibly in the USA.

Google uses data to evaluate site usage, generate reports, and offer related services. IP is not merged with other Google info. Data retained two months then deleted.

All processing requires your explicit consent; otherwise, the service is disabled during your visit. You can revoke consent anytime via the "Cookie-Consent-Tool".

Data processing agreement with Google protects visitor data and prohibits unauthorized third-party sharing.

Legal info and privacy links about Google Analytics are provided.

Demographic features and Google Signals, as well as UserIDs functionality are explained, with data only collected with your consent.

EU-US Data Privacy Framework ensures data protection for USA transmissions.

11.2 Google Analytics 4

Google Analytics 4 is used similarly to Universal Analytics with cookies for data collection, masking IPs, and data transmission to servers, subject to explicit consent.

Same data protection agreements and revocation procedures apply.

Demographics, Google Signals, UserIDs described as well.

11.3 Hotjar

Hotjar Ltd, Malta, provides a web analytics service using cookies and similar tech to store pseudonymized visitor data, heatmaps, and usage profiles. Data is only processed with your explicit consent.

Revocation via "Cookie-Consent-Tool" possible. Data processing agreements signed.

11.4 Triple Whale Analytics

Triple Whale Inc., Jerusalem, offers similar services with pseudonymized visitor data and heatmaps. Processing only upon consent, revokable anytime. Data processing agreements in place.

Data protection adequacy ensured for data transmissions.

12) Retargeting/ Remarketing and conversion tracking

12.1 Meta Pixel with enhanced data matching

We use "Meta Pixel" by Meta Platforms Ireland Limited ("Meta") in enhanced data matching mode for Facebook and Instagram ads.

The pixel adds URL parameters and collects customer data (email, etc.) to send to Meta for personalized ads and measuring ad performance with more conversions recorded.

Data is stored and can be used for advertising per Meta's data use policies. Consent needed for cookies and data processing.

Data agreements and EU-US Framework ensure data security. Data may be transferred to USA servers.

12.2 Google Ads Remarketing

This site uses retargeting by Google Ireland Limited. Google sets a pseudonymous cookie in your browser to enable interest-based ads based on visited pages.

Further data processing only with your consent. If logged in to Google, data can be linked for cross-device remarketing.

EU-US privacy framework applies for data transfers to USA.

Details on data use and privacy provided via links.

12.3 Microsoft Advertising

Retargeting with Microsoft Corporation enables personalized ads based on cookie analyses of usage. Cookies adapt ads to stored info.

Use only with your explicit consent and revocable through the "Cookie-Consent-Tool".

EU-US Data Privacy Framework applies for USA transfers.

12.4 Google Ads Conversion Tracking

Google Ads Conversion Tracking by Google Ireland Limited is used to measure ad success. Cookies track ad clicks and visits. Cookies expire after 30 days and are anonymous.

Data transfer and processing are only done with consent, revocable anytime.

Cookie opt-out browser plugins available. Customer matching uses encrypted aggregated data, only with explicit consent.

EU-US Data Privacy Framework applies.

12.5 Google Ads Conversion Tracking without cookies

Conversion Tracking is used without cookie deployment, using local browser storage to assign a unique ID. Data processed anonymously with consent only.

Data transferred to USA servers with privacy protections. Consent revocable anytime.

12.6 Google Ads Conversion Tracking

Same as above (12.4) with cookie use.

EU-US Data Privacy Framework applies, revocable consent via "Cookie-Consent-Tool".

12.7 Google Marketing Platform

We use Google Marketing Platform (GMP) to deliver relevant ads, improve campaign reports, and avoid duplicate ads. GMP uses cookies and collects data about which ads display in which browser.

Browser directly connects to Google server. Consent required, revocable anytime.

Data transfers to USA under EU-US privacy framework.

12.8 TikTok Pixel

We use TikTok Technology Limited's conversion tracking to assess ad success via cookies and similar technologies analyzing user interaction post-ad click.

Processing only with user consent. Data processing agreements in place.

13) Site functionalities

13.1 Facebook plugins

Facebook plugins from Meta Platforms Ireland Ltd. enable direct interactions with social network content.

Plugins initially disabled for privacy using "2-click" or "Shariff" solution. Activating plugins requires consent.

Data transferred to Meta Platforms Inc., USA. Data agreements and EU-US privacy framework apply.

13.2 Instagram plugins

Same approach as Facebook plugins, using Meta platforms, with privacy by default and data agreements.

13.3 Vimeo

Plugins by Vimeo.com, Inc., USA, used to display and play videos, connecting browsers directly to provider servers.

Cookies set during playback to collect user behavior info. Logged in user data associated with account.

Processing only with consent, revocable anytime. EU-US framework applies.

13.4 Youtube

Youtube plugins by Google Ireland Limited, connecting browsers to servers, similar privacy protections and consent rules apply.

Data may be transferred to Google LLC, USA.

13.5 TrustPilot

Embedded graphics for external customer reviews from Trustpilot A/S, Denmark, load via direct browser connection with data transmission including IP address.

Processing based on legitimate interest under Art. 6 para. 1 lit. f GDPR.

13.6 Google Web Fonts

This site uses Google Ireland Limited's web fonts for consistent typography, loading fonts into browser cache with data transfer including IP address.

Personal data processed only on consent basis, revocable anytime. EU-US Data Privacy Framework applies.

13.7 - Google reCAPTCHA

CAPTCHA service by Google Ireland Limited used to differentiate between humans and bots, collecting device IP, browser and OS info, possibly using cookies.

Processing based on consent or our legitimate interest if no cookies are used.

Data processing agreements signed, EU-US privacy framework applies.

13.8 Zapier

Zapier Inc., USA, used to integrate and synchronize databases and web applications, automating processes by our legitimate interest.

Processing only with data processing agreement, EU-US privacy framework applies.

13.9 Typeform

TYPEFORM SL, Spain, is used for surveys and online forms, collecting entered personal data plus system info, storing it password protected.

Legal basis Art. 6 para. 1 lit. b or a GDPR depending on consent. Data processing agreement signed.

13.10 Applications for job postings via email

We list vacant jobs with email application option including personal and health-related info, processed for recruitment under Art. 6 para. 1 lit. b GDPR or Art. 9 GDPR for special categories.

Data deleted after up to 6 months if application not successful or withdrawn.

13.11 Online applications via form

Similar to above but applications via encrypted form submission stored and processed.

14) Tools and Miscellaneous

14.1 - Billbee

We use cloud accounting software Billbee GmbH, Germany, processing invoices and bank transactions to automate bookkeeping per our legitimate interest.

- DATEV

Similar accounting services used from DATEV eG, Germany.

14.2 Cookie-Consent-Tool

We use a cookie consent tool to obtain legally valid user consents for cookies and cookie-based apps, only loading cookies/services if user consents via checkbox.

Tool uses necessary cookies to store preferences. Personal user data not processed except possibly for IP address for storing or logging settings under Art. 6 para. 1 lit. f GDPR.

Legal obligations under Art. 6 para. 1 lit. c GDPR apply.

Data processing agreements signed for provider, info on settings available on website.

15) Rights of the data subject

15.1 Applicable data protection law grants you the following rights vis-à-vis the controller concerning your personal data (information and intervention rights), referring to the legal basis for conditions of exercise:

Right of access under Art. 15 GDPR;
Right to rectification under Art. 16 GDPR;
Right to erasure under Art. 17 GDPR;
Right to restriction of processing under Art. 18 GDPR;
Right to notification under Art. 19 GDPR;
Right to data portability under Art. 20 GDPR;
Right to revoke consent under Art. 7 para. 3 GDPR;
Right to lodge complaint under Art. 77 GDPR.

15.2 Right of objection

If we process your personal data based on a balancing of interests due to our legitimate interest, you have the right to object at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data concerned, unless we can demonstrate compelling legitimate grounds overriding your interests or if processing serves legal claims.

If your personal data are processed by us for direct marketing, you have the right to object at any time with effect for the future. If you object, we will cease direct marketing processing.

16) Duration of storage of personal data

The storage duration of personal data depends on legal basis, processing purpose, and applicable statutory retention periods (e.g. commercial and tax law).

For data processed based on consent per Art. 6 para. 1 lit. a GDPR, data are retained until consent is revoked.

For legal storage periods under Art. 6 para. 1 lit. b GDPR, data are routinely deleted after expiration unless required for contract fulfillment or legitimate interests exist.

For data processed under Art. 6 para. 1 lit. f GDPR, data are stored until objection or overriding legitimate reasons require further storage.

For direct marketing data per Art. 6 para. 1 lit. f GDPR, data are stored until you object under Art. 21 para. 2 GDPR.

If no other specific information is given, stored personal data will be deleted when no longer necessary for purposes collected or processed.

Status: 07.03.2026, 04:23:18

configurator.ps5.kicker

configurator.ps5.title

Configurator

Configurator