Skip to main content

Privacy Policy

1) Introduction and contact details of the data controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Paulitschek Maschinen- und Warenvertriebsgesellschaft mbH, Zeppelinstraße 3, 89231 Neu-Ulm, Germany, Tel.: 0731/23232, fax: 0731/27676, email: support@paulimot.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The data controller has appointed a data protection officer, who can be contacted as follows: "Marc Weiß, Herrenkellergasse 6, 89073 Ulm, 0731 3799 861, https://www.mwv-ulm.de/dsb-kontakt.php?val1=Paulitschek%20Maschinen-%20und%20Warenvertriebsgesellschaft%20mbH&val2=Zeppelinstrasse%203&val3=D-89231%20Neu-Ulm"

2) Data collection when visiting our website

2.1 When you use our website purely for information purposes – i.e. if you do not register or otherwise provide us with information – we only collect data that your browser transmits to the website server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website we visited
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/link from which you arrived at the page
  • Browser used
  • Operating system used
  • IP address used (where applicable: in anonymised form)

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock icon in your browser address bar.

3) Hosting & Content-Delivery-Network

3.1 Bunny

We use a content delivery network (CDN) provided by the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia

This service enables us to deliver large media assets such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Article 6(1)(f) of the GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

3.2 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Article 6(1)(f) of the GDPR. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

4) Cookies

To make your visit to our website more engaging and to enable the use of certain features, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called ‘session cookies’), whilst others remain on your device for longer and enable page settings to be saved (so-called ‘persistent cookies’). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

Where personal data is also processed by individual cookies used by us, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR where consent has been given, or in accordance with Article 6 Abs. 1 lit. f DSGVO to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective experience for visitors.

You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact us

5.1 Zendesk

To process customer inquiries, we use the email ticketing system provided by the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland

If you submit enquiries via email through our website, these are stored and organised in the ticketing system to enable them to be processed chronologically and to improve the service experience. You can always check the current status of your enquiry using the unique ticket number assigned to it.

For the purpose of managing and processing inquiries, personal data is collected in accordance with the extent to which it is provided, and in any case includes surname, first name and email address, and is transmitted to the provider, where it is stored and accessed.

The legal basis for the processing of this data is our legitimate interest in the efficient organisation of our customer service, in responding to your enquiry as quickly as possible, and in optimising our range of services in accordance with Article 6(1)(f) of the GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

5.2 When you contact us (e.g. via the contact form or by email), personal data is processed – solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted as soon as the circumstances indicate that the matter in question has been conclusively resolved, provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account

In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account by referring to the input fields on the relevant form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the data controller. Once your customer account has been deleted, your data will be deleted, provided that all associated contracts have been fully settled, no statutory retention periods prevent this, and we no longer have a legitimate interest in continuing to store the data.

7) Use of customer data for direct marketing

7.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular updates on our offers. The only mandatory information required to receive the newsletter is your email address. Providing any further details is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you will only receive the newsletter once you have expressly confirmed your consent to receive it by clicking on a verification link sent to the email address you provided.

By clicking the confirmation link, you give us your consent to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the purpose for which it was collected.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

7.2 Campaign.Plus

Our email newsletters are sent via this provider: Campaign.Plus GmbH, Schulgasse 5, 84359 Simbach am Inn, Germany

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when subscribing to the newsletter to this provider in accordance with Article 6(1)(f) of the GDPR, so that they can handle the dispatch of the newsletter on our behalf.

Subject to your express consent in accordance with Article 6(1)(a) of the GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter’s content. In doing so, device data (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time with future effect.

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits its disclosure to third parties.

7.3 WonderPush

On this website, you can opt in for recurring push notifications with information about our services.

For this purpose, we use the services of the following provider: WonderPush, 19 avenue d'Italie, 75013 Paris, France

As part of the registration process, through which you give your explicit consent to receive push notifications and to the associated processing in accordance with Article 6(1) lit a of the GDPR, your browser ID and device ID are collected, stored and used by the provider to ensure the correct assignment and display of notifications.

Subject to your express consent in accordance with Article 6(1)(a) of the GDPR, the provider also carries out a statistical analysis of push notifications and interactions, whereby further information (e.g. time of access, IP address) are collected and analysed, but are not merged with other data sets.

You may withdraw your consent to the processing of data for the purpose of receiving push notifications and for statistical performance measurement at any time with future effect by disabling the service in your browser settings or – depending on your operating system – by unsubscribing via the relevant push notification.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

7.4 Email notifications regarding product availability

For items that are temporarily out of stock, you can sign up to receive email stock availability notifications. We will send you a one-off email notification regarding the availability of the item you have selected. The only mandatory information required to receive this notification is your email address. Providing any further details is optional and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you will only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the email address you provided.

By clicking on the confirmation link, you give us your consent to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service regarding product availability is used strictly for the purpose for which it was collected.

You may unsubscribe from inventory alerts at any time by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

8) Data processing for order fulfilment

8.1 To the extent necessary for the performance of the contract for the purposes of delivery and payment, the personal data we collect will be disclosed to the contracted transport company and the contracted credit institution in accordance with Article 6(1)(b) of the GDPR.

Where we are obliged, on the basis of a relevant contract, to provide updates for goods containing digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally in accordance with our statutory information obligations under Article 6(1)(c) of the GDPR. Your contact details will be used strictly for the specific purpose of communicating updates for which we are responsible, and will be processed by us for this purpose only to the extent necessary to provide the relevant information.

To process your order, we also work with the service provider(s) listed below, who assist us, either fully or in part, with the fulfilment of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

8.2 Disclosure of personal data to delivery service providers

- DHL

We use the following carrier: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will pass on your email address and/or telephone number to the supplier in accordance with Article 6(1)(a) of the GDPR prior to delivery of the goods, for the purpose of arranging a delivery date or notifying you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to the supplier. This data is shared only to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier in advance or to provide advance delivery notification.

Consent may be withdrawn at any time, with effect for the future, by contacting the data controller named above or the provider.

8.3 Use of payment service providers

- Apple Pay

If you choose the payment method “Apple Pay” of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment is processed via the “Apple Pay” function of your device operated with iOS, watchOS or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorise a payment, you must therefore enter a passcode you have previously set and verify the transaction using your device’s “Face ID” or “Touch ID” feature.

For the purposes of payment processing, the information you provide during the checkout process, together with details of your order, will be passed on to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before the data is transmitted to the payment service provider associated with the payment card stored in Apple Pay in order to process the payment. This encryption ensures that only the merchant website through which the purchase was initiated can access the payment details. Once the payment is complete, Apple sends the device account number and a transaction-specific, dynamic security code back to the originating website to confirm the successful transaction.

Where personal data is processed in connection with the transfers described, such processing is carried out solely for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymisation ensures that the data cannot be linked to any individual. Apple uses the anonymised data to improve “Apple Pay” and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you have made via Safari on your Mac, your Mac and the authorisation device communicate via an encrypted channel through Apple’s servers. Apple does not process or store any of this information in a format that could be used to identify you personally. You can disable the option to use Apple Pay on your Mac in your iPhone’s settings. Go to ‘Wallet & Apple Pay", and turn off ‘Allow Payments on Mac".

Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027
- PAYONE

This website offers one or more online payment methods from the following provider: PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany

If you select a payment method offered by the provider that requires you to pay in advance (such as a credit card payment), the payment details you provided during the ordering process (including your name, address, bank and payment card details, currency and transaction number) as well as information regarding the contents of your order will be passed on in accordance with Article 6(1)(b) of the GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Paypal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method offered by the provider that requires you to pay in advance, your payment details provided during the checkout process (including your name, address, bank and payment card details, currency and transaction number) as well as information regarding the contents of your order will be passed on in accordance with Article 6(1)(b) of the GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where we pay in advance, you will also be asked during the checkout process to provide certain personal details (first name and surname, street, house number, postcode, town or city, date of birth, email address, telephone number, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in assessing your creditworthiness, we will pass this data on to the provider in accordance with Article 6(1)(f) of the GDPR for the purpose of a credit check. The provider evaluates the personal data you have provided as well as other data (such as your shopping cart, invoice amount, order history and payment history) to determine whether the selected payment method can be authorised in view of the risks of non-payment and/or bad debt.

The credit report may contain probability values (so-called ‘score’ values). Where score values are included in the credit report, they are based on a scientifically recognised mathematical and statistical method. The calculation of the score values takes into account, amongst other things but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data where this is necessary for the contractual processing of payments.

8.4 Electronic cancellation function for distance contracts

Consumers who enter into contracts on this website for which a statutory right of withdrawal applies have the option to exercise their right of withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

We use a solution provided by the following supplier to provide the electronic withdrawal function: J&G Agency GmbH, Konrad-Zuse-Straße 6, 46397 Bocholt, Germany.

When using the withdrawal function, in addition to details identifying the contract to be withdrawn from, further personal information such as the consumer’s first name, surname and email address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution in accordance with Article 6(1)(f) of the GDPR, then used to confirm receipt of the notice of withdrawal on our behalf via email, and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the withdrawal in accordance with Article 6(1)(b) of the GDPR and Article 6(1)(c) of the GDPR on the basis of our legal obligation to provide an electronic withdrawal function for fee-based consumer distance contracts.

The information collected by the provider is routinely deleted once a withdrawal has been finalised, provided that there are no statutory retention obligations to the contrary.

We have entered into a data processing agreement with the provider, which protects data processed as part of the cancellation function and prohibits unauthorised disclosure to third parties.

9) Webanalysedienste

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and used to collect certain information. This information includes your IP address; however, Google truncates the last few digits of this address to prevent direct personal identification.

The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us, and to provide other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics, which has been truncated, is not combined with any other data held by Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please deactivate this service via the “Cookie Consent Tool“ provided on the website.

We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is achieved by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be linked to any specific individual and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may – subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR – analyse your usage behaviour across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the ‘Personalised ads’ feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the function "UserIDs" may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the „Google Tag Manager“, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: „Google“).

Google Tag Manager provides a technical framework for bundling various web applications, including tracking and analytics services, and for configuring, controlling and applying conditions to them via a unified user interface. Google Tag Manager itself does not store any information on users’ devices or read such information. Nor does the service carry out any independent data analysis. However, when a page is loaded, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers operated by Google LLC. in the USA is also possible.

This processing will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with future effect. To withdraw your consent, please deactivate this service using the „Cookie-Consent-Tool“ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9.3 Hotjar

This website uses the web analytics service provided by the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser details, in order to analyse usage behaviour on our website for statistical purposes and to create pseudonymised user profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally precludes any direct association with an individual. No merging takes place with personally identifiable data collected by other means.

All processing operations described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

9.4 PayPal Marketing Solutions

This website uses the web analytics service provided by the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser details, in order to analyse usage behaviour on our website for statistical purposes and to create pseudonymised user profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally precludes any direct association with an individual. No merging takes place with personally identifiable data collected by other means.

All processing operations described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

9.5 Shopware Analytics

This website uses the web analytics service provided by the following provider: shopware AG, Ebbinghoff 10, 48624 Schöppingen

On the basis of joint controllership between us and the service provider within the meaning of Article 26 of the GDPR, the service collects and stores pseudonymised visitor data using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), including information about the device used, such as browser details, in order to analyse usage behaviour on our website for statistical purposes and to create pseudonymised usage profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally precludes any direct association with specific individuals. No merging takes place with personally identifiable data collected about you by other means.

All processing operations described above, in particular the reading or storage of information on the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

10) Retargeting/ Remarketing und Conversion-Tracking

10.1 Meta Pixel

Within our online offering, we use the service "Meta Pixel" provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

If a user clicks on an advert we have placed on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". After the user is redirected, this URL parameter is then stored in the user’s browser via a cookie set by our linked page itself.

This enables Meta, on the one hand, to identify visitors to our website as a target audience for the display of advertisements (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we place only to those users who have shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the websites visited), which we transmit to Meta (so-called „Custom Audiences“).

On the other hand, the „Meta Pixel“ can be used to track whether users have been redirected to our website after clicking on an advert and what actions they take there (known as „conversion tracking“).

The data collected is anonymous to us, so it does not allow us to identify individual users. However, the data is stored and processed by Meta, meaning it can be linked to the relevant user profile and Meta may use the data for its own advertising purposes.

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transmitted to and stored on a Meta server; in this context, it may also be transferred to servers operated by Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

10.2 releva.nz

This website uses retargeting technology from the following provider: releva GmbH, Feilnerstr. 10, 10969 Berlin, Germany

This enables us to target website visitors with personalised, interest-based advertising who have already shown interest in our store and our products. The display of these ads is based on a cookie-based analysis of past and current usage behaviour.

Where retargeting technology is used, a cookie is stored on your computer or mobile device to collect pseudonymised data about your interests, thereby enabling adverts to be tailored to the information stored. These cookies are small text files that are stored on your computer or mobile device. This means you will be shown ads that are highly likely to match your product and information interests.

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You may withdraw your consent at any time with future effect. To withdraw your consent, please deactivate this service using the „Cookie-Consent-Tool“ provided on the website.

10.3 Google Ads Conversion-Tracking

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). We use Google Ads to draw attention to our attractive offers on external websites through advertising (known as Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our goal is to show you relevant ads, enhance the appeal of our website, and ensure fair calculation of incurred advertising costs.

The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits specific pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to that page. Each Google Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Advertisers are informed of the total number of users who have clicked on their ad and been redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details on the processing triggered by Google Ads Conversion Tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

You can also permanently opt out of Google Ads conversion tracking by downloading and installing the Google browser plug-in available via the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain features of this website may not be available, or may be available only to a limited extent, if you have disabled cookies.
Google’s privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

10.4 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Using a cookie ID, Google tracks which ads are displayed in which browser and can thus prevent them from being shown multiple times. Furthermore, GMP can use cookie IDs to track so-called conversions relating to ad requests. This is the case, for example, when a user sees a GMP advert and later, whilst using the same browser, visits the advertiser’s website and makes a purchase via that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server.

We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore provide the following information to the best of our knowledge: By integrating GMP, Google receives information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, the provider may still obtain and store your IP address. As part of the use of GMP, personal data may also be transferred to the servers of Google LLC. in the USA.

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

The privacy policy of GMP by Google can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Page features

11.1 Instagram plugins

Our website integrates social network plugins from the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interaction with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially disabled and integrated into the page using a so-called „2-click“ or „Shariff“ solution.

This integration ensures that, when a page on our website containing such plugins is accessed, no connection is yet established with the provider’s servers.

Only once you have activated the plugins and thereby given your consent to the data transfer in accordance with Article 6(1)(a) of the GDPR will your browser establish a direct connection to the provider’s servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the enabled plugin by clicking on it again. However, the withdrawal of consent does not affect any data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

11.2 Pinterest plugins

Our website integrates social network plugins from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially disabled and integrated into the page using a so-called „2-click“ or „Shariff“ solution.

This integration ensures that, when a page on our website containing such plugins is accessed, no connection is yet established with the provider’s servers.

Only once you have activated the plugins and thereby given your consent to the data transfer in accordance with Article 6(1)(a) of the GDPR will your browser establish a direct connection to the provider’s servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can withdraw your consent at any time by deactivating the enabled plugin by clicking on it again. However, the withdrawal of consent does not affect any data that has already been transferred to the provider.

Data may also be transferred to: Pinterest Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

11.3 Xing plugins

On this website, the „XING Share button“ of the following provider is used: New Work SE, Am Strandkai 1, 20457 Hamburg
When you visit this website, your browser briefly establishes a connection to the provider’s servers, which are used to provide the „XING Share button“ functions (in particular, the calculation/display of the counter value). The provider does not store any personal data, in particular no IP addresses. Nor is your usage behaviour analysed via the use of cookies in connection with the „XING Share button“.

11.4 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC., USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when the video starts playing, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider whilst visiting the site, your data will be directly linked to your account when you click on a video. If you do not wish for this data to be linked to your account, you must log out before clicking the play button.

All the aforementioned processing activities, in particular the setting of cookies to read information from the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

11.5 ShopVote graphics

Graphic elements from the following provider are integrated into our website to display external customer reviews and/or an externally awarded quality mark: Blickreif GmbH, Schulstraße 46, 80634 München, Germany

When you visit a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Where personal data is also processed in this context, this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the optimal marketing of our services and the appealing design of our website.

11.6 Google Maps

This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps, designed to present geographical information visually. By using this service, our location is displayed to you, making it easier for you to find your way here.

As soon as you access any of the subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them.

The collection, storage and analysis of data are carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, conducting market research and/or tailoring Google websites to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not consent to your data being transferred to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available for use.

Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please follow the procedure for lodging an objection as described above.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.7 - Google reCAPTCHA

On this website, we use the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

For the visual design of the CAPTCHA window, „Google Fonts", i.e. fonts downloaded from the internet by Google, are used. No information other than that mentioned above, which is already transmitted to Google via the reCAPTCHA functionality, is processed in this context.

The service checks whether an input is made by a human or, abusively, through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access attempts. To ensure that an action is carried out by a human and not by an automated bot, the provider collects the IP address of the device used, identification data relating to the browser and operating system type used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for evaluation. Cookies may be used for this purpose, i.e. small text files that are stored in the end-user’s browser.

Where the processing described above is carried out using cookies, these will only be set if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the „Cookie-Consent-Tool“ provided on the website.

If the processing operations described above are carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and in preventing misuse and spam, in accordance with Article 6(1)(f) of the GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

11.8 Applying for job vacancies by email

On our website, we advertise current vacancies in a separate section; interested candidates can apply by emailing the contact address provided.

Applicants must provide all personal data required for a thorough assessment, including general information such as name, address and contact details, as well as proof of performance and, where applicable, health-related information. Further details regarding the application can be found in the job advertisement.

Once we have received your application via email, your data will be stored and processed solely for the purpose of processing your application. Should we have any queries, we will contact the applicant via either their email address or telephone number. Processing is carried out on the basis of Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is regarded as a preliminary step towards an employment contract.

Where, as part of the recruitment process, special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g. health data such as information regarding severe disability status) are requested from applicants, the processing is carried out in accordance with Article 9(2) lit. b. GDPR, so that we may exercise the rights arising from labour law and the law on social security and social protection, and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9 Abs. 1 lit. h DSGVO if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, care or treatment in the health or social care sector, or for the administration of systems and services in the health or social care sector.

If an applicant is not selected or withdraws their application early, the data they have submitted, as well as all electronic correspondence, including the application email, will be deleted no later than six months after notification has been given. This period is determined by our legitimate interest in being able to answer any follow-up questions regarding the application and, where necessary, to fulfil our obligations to provide evidence under the regulations on the equal treatment of applicants.

If your application is successful, the data provided will be processed on the basis of Article 6(1)(b) of the GDPR (in the case of processing in Germany, in conjunction with Section 26(1) of the BDSG) for the purpose of managing the employment relationship.

12) Tools und Sonstiges

12.1 DATEV

We use the cloud-based accounting software service provided by the following provider to carry out our bookkeeping: DATEV eG, Paumgartnerstr. 6-14, 90429 Nürnberg, Germany

The provider processes our company’s incoming and outgoing invoices, as well as any relevant bank transactions, in order to automatically capture invoices, match them to the relevant transactions and, through a semi-automated process, generate the financial accounts.

Where personal data is also processed in this context, such processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business processes in accordance with Article 6(1)(f) of the GDPR.

12.2 Cookie-Consent-Tool

This website uses a so-called „Cookie-Consent-Tool“ to obtain valid user consent for cookies and cookie-based applications that require consent. The „Cookie-Consent-Tool“ is displayed to users when they visit the page in the form of an interactive user interface, on which they can give their consent to specific cookies and/or cookie-based applications by ticking the relevant boxes. Through the use of this tool, all cookies/services requiring consent are only loaded once the user has given their consent by ticking the relevant boxes. This ensures that such cookies are only set on the user’s device once consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this context.

Should the processing of personal data (such as the IP address) nevertheless occur in individual cases for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

A further legal basis for the processing is Article 6(1)(c) of the GDPR. As the data controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary conditional upon the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorised disclosure to third parties.

Further information about the operator and the settings options for the cookie consent tool can be found directly in the relevant user interface on our website.

13) Rechte des Betroffenen

13.1 Under applicable data protection law, you are granted the following data subject rights (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:

  • Right of access pursuant to Article 15 of the GDPR;
  • Right to rectification pursuant to Article 16 of the GDPR;
  • Right to erasure pursuant to Article 17 of the GDPR;
  • Right to restriction of processing pursuant to Article 18 of the GDPR;
  • Right to information pursuant to Article 19 of the GDPR;
  • Right to data portability pursuant to Article 20 of the GDPR;
  • Right to withdraw consent in accordance with Article 7(3) of the GDPR;
  • Right to lodge a complaint under Article 77 of the GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. WE RESERVE THE RIGHT TO CONTINUE PROCESSING, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

14) Retention period for personal data

The period for which personal data is stored is determined by the relevant legal basis, the purpose of processing and – where applicable – additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Article 6(1)(b) of the GDPR, such data will be routinely deleted upon expiry of the retention periods, provided that it is no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

When processing personal data for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information contained in this policy regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.