| History of privacy settings | Revoke consent

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the relevant consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal basis for the processing of personal data in this context is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the relevant consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

Privacy policy

Unless otherwise stated below, the provision of your personal information is neither required by law nor by contract, nor required to conclude a contract. You are not required to provide the data. A non-provisioning has no consequences. This applies only insofar as no other indication is given in the subsequent processing operations.
“Personal data” is all information that relates to an identified or identifiable natural person.

Server log files
You can visit our website without giving any personal information. 
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider.
The processing takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR from our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer. 

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision.

Contact

Controller
Contact us if you wish. Responsible for data processing is: Arno Driemeyer, Wolfgang Amadeus Mozart Str. 21, 49205 Hasbergen Germany, 05405 / 9104039, info@tolymp.de

Unsolicited contact of the customer by email
If you initiate business contact with us via e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you have provided. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interests, preparation of offers) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you have provided. The data processing serves the purpose of establishing contact.

If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interests, preparation of offers) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Using Google Maps API address validation
We use address validation from the provider Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland “Google”) on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and typographical errors and, if necessary, supplementing missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter will be transmitted to the provider, stored and evaluated there.
Among other things, the following information can be transmitted to Google and processed there: postal addresses (country, city, zip code, street, house number), email address, telephone number.
Your data may also be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus obliged to comply with European data protection principles.
Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in a correct data basis to fulfill our contractual obligations. For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.
The data is processed separately by the provider and is not combined with other data. They will be deleted by the provider as soon as the status of the entered data has been determined, but no later than 30 days.
You can find more information about Google's terms of use and data protection at: https://cloud.google.com/maps-platform/terms or by https://www.google.de/policies/privacy/.

Collection and processing when using the application form
When you use the application form, we only collect your personal data to the extent provided by you. This includes your contact details (e.g. name, email address, telephone number), information about your professional qualifications and training, information about further professional training and performance-specific evidence.

The data processing serves the purpose of contacting you and making a decision about establishing an employment relationship with you. The provision of the data is necessary in order to carry out the application process. Your personal data is processed on the basis of Article 6 Paragraph 1 Letter b GDPR in conjunction with Section 26 Paragraph 1 BDSG to carry out pre-contractual measures (going through the application process to initiate an employment contract).
If you have given us your consent to process personal data for inclusion in our applicant pool, for example by ticking a checkbox, the processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to us at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.

If special categories of personal data within the meaning of Article 9 Paragraph 1 GDPR are requested from applicants as part of the application process, such as information on the degree of severe disability, this is done on the basis of Article 9 Paragraph 2 lit. GDPR so that we can exercise our rights under labor law and social security and social protection law and comply with our obligations in this regard.

We store your personal data as long as this is necessary for the decision on your application. Your data will then be deleted after six months at the latest, unless you have consented to further processing and use. If there is an employment relationship following the application process, the data provided will be processed on the basis of Article 6 Paragraph 1 Letter b GDPR in conjunction with Section 26 Paragraph 1 BDSG for the purposes of carrying out the employment relationship and then transferred to the personnel file .

Using Calendly
We use the appointment booking function “Calendly” from the provider Calendly LLC (BB&T.) on our website Tower, 271 17th St NW, Atlanta, GA 30363, USA).
When you use this function, we collect and process your personal data (first and last name, email address and telephone number, message text) only to the extent provided by you. The data processing serves the purpose of scheduling appointments and user-friendliness.
Calendly uses technologies such as cookies. The following information, among other things, can be collected and transmitted to Calendly: IP address, date and time of the page view, device model, information about the browser you are using and the operating system you are using as well as the location.
Your data may be transferred to third countries such as the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Calendly has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
The processing of your personal data for booking an appointment takes place on the basis of Article 6 (1) (b) GDPR to fulfill the contract concluded with us or to carry out pre-contractual measures.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Article 6 Paragraph 1 Letter a GDPR. The processing of your personal data through the use of cookies takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.
Further information on data protection and the use of cookies at Calendly can be found at https://calendly.com/privacy.

WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version from WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland; “WhatsApp”). If you are staying outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data from users who have contacted us via WhatsApp is stored. A transfer of personal data to WhatsApp without you having already given your consent to WhatsApp does not take place.
Your data will be transmitted by WhatsApp to the Meta Platforms Inc. server in the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself according to the TADPF and is thus obliged to comply with European data protection principles. If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 lit. b GDPR.

If contact is made for other reasons, this data processing takes place on the basis of Article 6 Paragraph 1 lit. In this case, you have the right, for reasons arising from your particular situation, to do so at any time in accordance with Art. 6 Para. 1 lit. to object to processing based on the GDPR relating to your personal data.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
For more information on terms of use and data protection when using WhatsApp, see https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Orders      

Collection, processing and transfer of personal data during orders
When ordering, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit. b DSGVO and is required to fulfill a contract with you. 
For example, your data may be forwarded to your chosen shipping companies and dropshipping providers, payment service providers, order processing service providers and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. 

Reviews and Advertising      

Data collection when writing a comment or rating
When you comment on/rate an article or post, we only collect your personal data (name, email address, comment text) to the extent provided by you. The processing serves the purpose of enabling comments/ratings and displaying comments/ratings. 

By submitting the comment/evaluation, you agree to the processing of the transmitted data. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your personal data will then be deleted.

When your comment/rating is published only the name you specified published.

Using the e-mail address to receive newsletters
We use your e-mail address, regardless of the contract, exclusively for our own promotional purposes to the newsletter, unless you have expressly consented to. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until your revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list. 

Using the e-mail address for sending direct mail
We use your e-mail address, which we obtained in connection with the sale of a good or service, for the electronic transmission of advertising for own goods or services, which are similar to those, which you already acquired with us, as far as this Use did not contradict. The provision of the e-mail address is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit. f DSGVO from our predominant legitimate interest in direct mail. You may object to this use of your e-mail address at any time by notifying us. The contact details for the exercise of the contradiction can be found in the imprint. You can also use the dedicated link in the promotional e-mail. There are no other costs than the transmission costs according to the basic tariffs.

Using Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send the newsletter as part of order processing.
We pass on the information you provided when registering for the newsletter (email address, first and last name if applicable) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1×1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device as well as the time. Usage profiles can be created from this data under a pseudonym. The data collected will not be used to identify you personally. The data collected is only used for statistical evaluation to improve newsletter campaigns.
Your data is usually transmitted to Klaviyo servers in the USA and stored there. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself according to the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in a targeted, promotionally effective and user-friendly newsletter system. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as under https://www.klaviyo.com/legal/data-processing-agreement

Shipping service providers and ERP      

Forwarding the e-mail address to shipping companies for information about the shipping status
We will pass on your e-mail address as part of the contract to the transport company, if you have agreed to this explicitly in the ordering process. The purpose of the disclosure is to inform you by e-mail about the delivery status. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us or the carrier without affecting the legality of the processing carried out on the basis of the consent to revocation.

Use of an external ERP system
We use a merchandise management system as part of order processing for contract execution. Your personal data collected during the order process will be used for this purpose

DreamRobot GmbH, Eckendorfer Str. 2-4, 33609 Bielefeld
transmitted.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.

payment service      

Use of the payment service provider Mollie
We use the payment service provider Mollie BV (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing serves the purpose of being able to offer you various payment methods through payment processing via the payment service provider Mollie. If you have chosen one of the payment options of the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (e.g. bank account number or credit card number), your IP address, your internet browser and device type and in some cases your first and last name, your address details and information about the product or service you have purchased from us. This data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. More information on data processing when using the payment service provider Mollie can be found in the associated data protection declaration https://www.mollie.com/de/privacy

 

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or the Internet browser on the computer system of a user. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
Under the links below you can find out how to manage (among other things disable) cookies on the most important browsers:
Technically necessary cookies
Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, more effective and more secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.
The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. Your personal data is processed on the basis of Art. 6 Paragraph 1 lit.
For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.

 

Use of the EU Cookie Law plug-in
We use the open source software EU Cookie Law Plug-in on our website.
The plug-in enables you to give your consent to data processing via the website, in particular the setting of cookies, and to make use of your right of withdrawal for consents that have already been given. Data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus complying with legal obligations. Cookies can be used. Among other things, information about your consent status can be processed.
Data processing takes place to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR.
You can find more information at: https://de.wordpress.org/plugins/eu-cookie-law/

Analysis, advertising tracking and communication      

Use of Google Analytics 4

We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. 
The following information can be collected, among other things: IP address, date and time of page access, click path, information about the browser you use and the device you use, pages visited, referrer URL (website through which you visit our website). website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you.

The IP address is previously shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.

The information generated in this way about your use of this website is usually transmitted to a Google server in the USA and stored there. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. Both Google and US government authorities have access to your data.

For more information about Terms of Use and Privacy, please see https://policies.google.com/technologies/partner-sites and under https://policies.google.com/privacy?hl=de&gl=de.

Use of Hotjar
We use the Hotjar Ldt analysis tool on our website. (Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”).
The data processing serves the purpose of the needs-based design, optimization and analysis of our website.
The tool records the movements of visitors to the website on a random basis. This creates a log of mouse movements, scrolling behavior, length of stay and clicks on the website (so-called heat map).
For this purpose, Hotjar uses cookies, among other things. The following information can be collected: IP address (in anonymous form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (only for the country), preferred language to display the website, operating system used. You can find detailed information on the cookies used, their function and storage duration here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
User profiles are created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not combined with the personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not TADPF certified. The data transfer takes place, among other things, on the basis of appropriate protective measures. Hotjar will provide you with further information on the measures taken upon request.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish.

Using the Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website.
Meta and we are jointly responsible for the collection of your data when you integrate the service and the transmission of this data to Meta. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are determined. The agreement is under https://de-de.facebook.com/legal/terms/businesstools callable. Thereafter, we are in particular responsible for fulfilling the information obligations in accordance with Articles 13 and 14 of the GDPR, for compliance with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations under Article 33 , 34 GDPR, to the extent that a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling the rights of those affected in accordance with Articles 15 - 20 of the GDPR, of complying with the security requirements of Article 32 of the GDPR with regard to the security of the service and of fulfilling the obligations under Articles 33 and 34 of the GDPR insofar as there is a violation of protection of personal data affects Meta's obligations under the Joint Processing Agreement.
The purpose of the application is to target visitors to the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag was implemented on the website. This tag is used to establish a direct connection to the meta servers when you visit the website. This sends information to the meta server about which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will be shown personalized, interest-based ads.
The application also serves the purpose of creating conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as what actions were taken after being redirected to this website. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.
You can deactivate the “Custom Audiences” remarketing function here. Further information on how Meta collects and uses data, your rights in this regard and options for protecting your privacy can be found in Meta's data protection information at https://www.facebook.com/about/privacy/.
Use Google Ads Conversion Tracking
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (evaluation of visits). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on an advertisement placed by Google, a cookie for the conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were forwarded to this page. Every Google Ads customer receives a different cookie. There is therefore no possibility that cookies can be traced via the websites of Ads customers.
The information that is obtained using the conversion cookie is used to create conversion statistics. Here we find out the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

 
Your data may be transmitted to Google LLC servers in the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus obliged to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
For more information and Google's privacy policy, please visit: https://www.google.de/policies/privacy/

 

Use of the Pinterest tag
We use the Pinterest tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland “Pinterest”) on our website.
The purpose of the application is to address visitors to the website in a targeted manner with interest-based advertising on the social network Pinterest. For this purpose, the conversion tag from Pinterest was implemented on the website. This tag creates a direct connection to the Pinterest servers when you visit the website. This will tell the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account when you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.
If you access our website via a pin on the social network Pinterest, a cookie for conversion tracking will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Pinterest can tell that you clicked on the pin and were forwarded to this page. The information that is obtained with the help of the conversion cookie is used to create conversion statistics and thus to optimize our website. The following information can be processed: Total number of users who clicked on one of our pins and were forwarded to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, your shopping cart contents, completed Transactions.
Your data may be transferred to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified according to the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
For more information on the collection and use of data by Pinterest, your rights in this regard and options for protecting your privacy, see the Pinterest data protection information at https://policy.pinterest.com/de/privacy-policy.

How to use TikTok Pixels
On our website we use the TikTok pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”). Both companies are the joint controllers for data processing (hereinafter “TikTok”).
The data processing serves the purpose of identifying and analyzing our customers' website access as well as to better address customers by placing targeted advertisements and to evaluate the effectiveness of advertisements on TikTok. To do this, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. The following information, among other things, can be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, it is not possible to personally identify users.
Your data may be transferred to third countries, such as the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified according to the TADPF. The transfer of data to the USA and to third countries without an adequacy decision is based, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
Further information on data protection can be found at https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Using the Crisp live chat system
We use the live chat system from Crisp IM SARL (2 Boulevard de Launay, 44100 Nantes, France; “Crisp”) on our website as part of order processing.
The data processing serves the purpose of direct and efficient communication between you and us as the provider. In order to operate the live chat system, cookies are used that enable the browser to be recognized. The following information, among others, may be processed and, if necessary, transmitted to Crisp: IP address and other personal data provided by you when using the chat system.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
Further information on data processing at Crisp can be found at: https://crisp.chat/de/privacy/

Plug-ins and other

Use of the Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.
The Google Tag Manager itself does not save cookies nor does it process personal data. However, it enables the triggering of further tags that can collect and process personal data.
You can find more information on terms of use and data protection here.

 

Using Google Maps
We use the function for embedding Google Maps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
The feature allows the visual presentation of geographic information and interactive maps. In doing so, Google also collects, processes and uses data from visitors to the websites when visiting the pages in which GoogleMaps maps are integrated.
Your data may also be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google 
has certified itself according to the TADPF and is thus obliged to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
For more information about the collection and use of data by Google, see Google's Privacy Policy https://www.google.com/privacypolicy.html, There you can also change your settings in the privacy center so that you can manage and protect your data processed by Google.

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited on our website (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is one with Google LLC (1600 Amphitheater Parkway, Mountain View, CA) 94043, USA; “Google”) affiliate.
The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it sent to YouTube and stored there. Your data may be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube 
has certified itself according to the TADPF and is thus obliged to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube's data protection information at https://www.youtube.com/t/privacy.

Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of the uniform representation of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is viewed. Cookies can be used for this. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus obliged to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
For more information on data processing and data protection, see https://www.google.de/intl/de/policies/ as well as under https://developers.google.com/fonts/faq.

Affected rights and storage duration

Duration of storage
After completion of the contract, the data is first stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial retention periods and then deleted after the deadline, unless you have consented to the further processing and use.

Rights of the person concerned
You are entitled to the following rights under Art. 15 to 20 DSGVO if the legal prerequisites are met: Right to information, to correction, to deletion, to restriction of processing, to data portability.
Furthermore, according to Art. 21 para. 1 DSGVO, you are entitled to a right of objection to the processing based on Art. 6 para. 1 f DSGVO as well as the processing for the purpose of direct mail.

Right of appeal to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach under the following contact details:

State Commissioner for Data Protection Lower Saxony
Prinzenstrasse 5
30159 Hanover
Phone: + 49 511 1204500
Fax: +49 511 1204599
Email: poststelle@lfd.niedersachsen.de

Right of objection
The personal data processing listed here is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO, you have the right for reasons that arise from your particular situation, at any time to object to these processing with effect for the future.
Following an objection, processing of the data in question will cease unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal claims.

If the personal data processing for purposes of direct mail, you can object to this processing at any time by notifying us. After the objection, we will stop the processing of the data concerned for the purpose of direct mailing.

last update: 29.11.2023