Privacy policy

The person responsible for data processing in accordance with Article 4 (7) of the GDPR is:

Bergerlin GmbH

Theresienstr. 56a, 80333 Munich

Represented by:

Managing Directors Martin Sebald, Daniel Sebald

Contact:

Email: info@bergerlin.com

Thank you for your interest in our online shop. Protecting your privacy is very important to us. In the following, we will inform you in detail about the processing of personal data when using our online store. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time fulfill the legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server merely automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval.

This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. Pursuant to Art. 6 (1) 1 lit. f GDPR, this serves to safeguard our legitimate interests in the proper presentation of our services, which are overriding in the process of balancing of interests. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider provides us with hosting and website display services. All data collected as described below when using this website or in the forms provided in the online shop are processed on its servers. We carefully select the third-party provider, which is bound by our instructions and regularly monitored. Processing on other servers only takes place within the scope explained here.

The third-party provider is located within a country of the European Union or the European Economic Area.

If other third-party providers, service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

2. Data collection and use for contract processing, establishing contact and opening a customer account

We collect personal data that you voluntarily provide to us as part of your order or when contacting us (e.g. via contact form or email). Mandatory fields are marked as such because we need the data in these cases to process the contract or to process your contact and you cannot send the order or establish contact without providing the information. The data collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO for contract processing and processing your inquiries.

Insofar as you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO by deciding to open a customer account, we will use your data for the purpose of opening a customer account.

After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we inform you in this declaration. You can delete your customer account at any time. This can be done either by sending a message to the contact option described below or by using the function provided in the customer account.

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after three years we will restrict the processing, i.e. from this point on your data will only be used to comply with legal obligations.

3. Data transfer

In order to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select during the ordering process, we will forward the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The privacy policy of the respective payment service provider applies in this respect.

We use payment service providers and shipping service providers that are based in a country outside the European Union. Personal data is only transferred to these companies to the extent necessary to fulfill the contract.

Data transfer to collection agencies

In order to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, we will pass on your data to a commissioned collection agency if our payment claim has not been settled despite a previous reminder. In this case, the debt will be collected directly by the collection agency. In addition, the disclosure serves to safeguard our legitimate interests in the effective assertion and enforcement of our payment claim in accordance with Art. 6 (1) (1) (f) GDPR.

4. E-mail newsletter

E-mail advertising with newsletter registration

When you register for our newsletter, we use the data required or separately provided by you for this purpose to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or by using the link provided in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner that goes beyond this, which is permitted by law and about which we inform you in this statement.

Email advertising without registering for the newsletter and your right to object

If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers by email for products from our range that are similar to those you have already purchased. This serves to safeguard our legitimate interests in advertising to our customers, which are overriding in the process of balancing of interests.

You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

5. cookies and web analysis

In addition to the data mentioned above, we use technical aids for various functions when you use our website, in particular cookies that can be stored on your end device. When you visit our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

In the following, we will first describe cookies from a technical point of view (a) before we go into more detail about your individual options by describing technically necessary cookies (b) and cookies that you can voluntarily deselect or deactivate (c).

(a) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the location that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer, but serve primarily to make the internet offering faster and more user-friendly. This website uses the following types of cookies, the functionality and legal basis of which we will explain below:

–Transient cookies: These, in particular session cookies, are automatically deleted when the browser is closed or when you log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the same session and your computer to be recognized when you return to our website.

–Persistent cookies: These are automatically deleted after a specified period, which is set differently for each cookie. You can view the cookies that have been set and their durations at any time in your browser settings and delete them manually.

(b) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are generally transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot opt out of these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 (1) 1 lit. f GDPR.

(c) Optional cookies when you give your consent: We only set various cookies after you have given your consent, which you can select during your first visit to our website using the cookie consent tool. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use our website via different browsers or end devices, to recognize you when you visit our website again or to place advertising (if necessary, also to tailor advertising to your interests, to measure the effectiveness of advertisements or to show interest-based advertising). The legal basis for this processing is Art. 6 (1) 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out up to the revocation.

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browser at the following links:

Internet Explorer™

If you do not accept cookies, the functionality of our website may be limited.

If you have given your consent in accordance with Article 6 (1) (a) of the GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes when Google Analytics is used (see below). This enables your browser to be recognized when you visit other websites. The information automatically generated by the cookie about your visit to this website is usually transferred to a Google server in the USA and stored there. The IP address will be shortened by activating the IP anonymization on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymized IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Once the purpose and end of our use of Google DoubleClick has ceased, the data collected in this context will be deleted.

Google DoubleClick is provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de).

You can revoke your consent at any time with effect for the future by disabling the DoubleClick cookie via this link. In addition, you can find out more about the setting of cookies and adjust the settings at Digital Advertising Alliance. Finally, you can adjust your browser settings so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis

If you have given your consent in accordance with Art. 6 (1) 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analysis service is provided by Google Ireland Limited, a company incorporated and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics uses methods such as cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. Due to the activation of IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymized IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. Once the purpose and end of our use of Google Analytics has been achieved, the data collected in this context will be deleted.

We primarily collect the interactions between you as a user of the website and our website with the help of cookies, data about the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about the country, region or city from which the respective user originates (so-called “IP location”). For your protection, however, we use the anonymization function (“IP masking”), i.e. Google shortens the IP addresses within the EU/EEA by the last octet.

Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually abbreviated) IP addresses regarding your use of this website are usually transmitted to a Google server in the United States and processed there. In these cases, Google has, according to its own statements, imposed a standard that corresponds to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an adequate level of data protection in the third country.

You can revoke your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This will prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser plug-in, you can <a href=“”javascript:gaOptout()“”>click this link</a> to prevent Google Analytics from collecting data on this website in the future. This stores an opt-out cookie on your device. If you delete your cookies, you will be asked to give your consent again.

For more information about the scope of services provided by Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/de/. Information on data processing when using Google Analytics is provided by Google at the following link: support.google.com/analytics/answer/6004245?hl=de. General information on data processing, which Google says should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

6. Online marketing

Google Ads

We use the Google Ads service to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads stores a cookie on your device. The legal basis for the processing of your data is Art. 6 (1) 1 lit. a GDPR, i.e. the integration only takes place with your consent.

The advertising material is delivered by Google via so-called “ad servers”. For this purpose, we and other websites use so-called ad server cookies, which allow certain parameters to be measured to determine success, such as the display of ads or clicks by users. We can obtain information about the success of our advertising campaigns from the Google Ads cookies stored on our website. These cookies are not designed to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marker that a user no longer wishes to be targeted) are usually stored as analysis values for this cookie.

The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer so that the cookies cannot be tracked through the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will obtain and store your IP address.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google that provide information about which ads were clicked on how often and at what prices. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

You can revoke your consent at any time without affecting the lawfulness of the processing up to the revocation. The easiest way to revoke your consent is to use our Consent Manager or the following functions: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by setting your browser to block cookies from the domain “www.googleadservices. com” are blocked, www.google.de/settings/ads, although this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the ‘About Ads’ self-regulation campaign via the link www.aboutads. info/choices, although this setting will be deleted if you delete your cookies; d) by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers at www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this offer to their full extent.

Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html.

Advertising with Facebook

Furthermore, the website uses advertising measures from Meta Platforms Inc. (“Facebook”). By integrating the so-called “Facebook Pixel” on our website, we can display our advertising measures (“Facebook Ads”) to users of our website and the social network Facebook and measure and evaluate their success (“Conversion Tracking”). This connection between Facebook and our website is technically implemented by the “Facebook Pixel”. The legal basis for the processing of your data is Art. 6 (1) 1 lit. a GDPR, i.e. the integration only takes place with your consent.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server when you visit our website. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore present the processes known to us: Through the integration of the Facebook pixel, Facebook receives the information that you have accessed the corresponding website of our Internet presence or clicked on one of our ads. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or are not logged in, there is a possibility that the provider will obtain your IP address and other identifying information and use it to create a profile.

The information collected is stored on Facebook servers, including in the United States. For these cases, the provider has, according to its own statements, imposed a standard that corresponds to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Facebook, the purpose of which is to maintain an adequate level of data protection in the third country.

You may revoke your consent at any time without affecting the lawfulness of the processing carried out up to the revocation. The easiest way to revoke your consent is to use our Consent Manager or by clicking [here]. In addition, (only logged-in users) can object to the provider's function under the following link: www.facebook.com/settings/?tab=ads#_.

Further information on data processing by Facebook is available from Meta Platforms Inc., 1601 S California Ave, Palo Alto, California 94304, USA; privacy policy: www.facebook.com/about/privacy.

Klaviyo

We use Klaviyo, an email marketing service provided by Klaviyo Inc., 125 Summer St Fl 6, Boston, Massachusetts, 02111, USA (“Klaviyo”).

Klaviyo also processes your personal data in the USA. According to the European Court of Justice, there is currently no adequate level of protection for the transfer of personal data to the USA. This may entail various risks for the lawfulness and security of data processing.

As a legal basis for data processing with recipients in third countries (outside the European Union, in particular in the USA) or a data transfer from the EU to a country outside the EU (in particular to the USA), Klaviyo uses so-called standard contractual clauses (Art. 46 para. 2 and 3 GDPR). Standard contractual clauses are model provisions provided by the EU Commission to ensure that your personal data will continue to comply with European data protection standards even if it is transferred to and stored in third countries (such as the United States). We have agreed with Klaviyo on standard contractual clauses that are designed to ensure an adequate level of data protection outside the European Union, particularly in the United States.

The standard contractual clauses require Klaviyo to comply with a European level of data protection when processing your personal data, even if the personal data is stored, processed and managed in the United States. These standard contractual clauses are based on an implementing decision of the EU Commission, which you can find at the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Klaviyo has, according to its own statements, adopted a standard that corresponds to the former EU-US Privacy Shield and has agreed to comply with the applicable data protection laws for international data transfers.

The data processing agreement, which corresponds to the standard contractual clauses, can be found at https://www.klaviyo.com/legal/data-processing-agreement

For more information about your personal data processed with Klaviyo, please see the relevant privacy policy at https://www.klaviyo.com/legal/privacy/privacy-notice

7. Other services

PushOwl Web Push Notifications

We use PushOwl Web Push Notifications, a web push notifications service provided by Creatorbox Softwares Private Limited, First Floor, 463, Shri Krishna Temple Rd, Indira Nagar 1st Stage, Stage 1, Indiranagar, Bengaluru, Karnataka 560038, India (“PushOwl”).

PushOwl also processes personal data about you outside Europe, in particular in India. This may entail various risks for the lawfulness and security of the data processing.

As a legal basis for data processing with recipients in third countries (outside the European Union) or a data transfer from the EU to a country outside the EU, PushOwl uses so-called standard contractual clauses (Art. 46 para. 2 and 3 GDPR). Standard contractual clauses are model provisions provided by the EU Commission to ensure that your personal data also meets European data protection standards when it is transferred to and stored in third countries (such as India). We have agreed standard contractual clauses with PushOwl, the purpose of which is to ensure an adequate level of data protection outside the European Union, particularly in India.

By means of the standard contractual clauses, Bytestand undertakes to comply with a European level of data protection when processing your personal data, even if the personal data is stored, processed and managed in India. These standard contractual clauses are based on an implementing decision of the EU Commission, which you can find at the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

PushOwl has, by its own account, adopted a standard that corresponds to the European level of data protection and has agreed to comply with the applicable data protection laws for international data transfers.

For more information about your personal data processed with PushOwl, please see the relevant privacy policy at https://pushowl.com/privacy and https://docs.pushowl.com/en/articles/2320482-gdpr-at-pushowl.

Easybill

We use Easybill, a cloud-based invoicing software service provided by easybill GmbH, Düsselstr. 21, 41564 Kaarst (“Easybill”).

The data processing agreement can be found at https://www.easybill.de/downloads/muster_av_vertrag_11_05_2018.pdf.

For more information about your personal data processed using Easybill, please refer to the corresponding data protection policy at https://www.easybill.de/datenschutz.

Reviews.io

We use Reviews.io, a service for company ratings provided by REVIEWS.io Limited 29 St Nicholas Place, Leicester, LE1 4LD, UK (“Reviews.io”).

Reviews.io also processes personal data about you in England/UK. This may entail various risks for the lawfulness and security of the data processing.

Reviews.io uses so-called standard contractual clauses (Art. 46 para. 2 and 3 GDPR) as the legal basis for data processing with recipients in third countries (outside the European Union, in particular the UK) or a data transfer from the EU to a country outside the EU (in particular the UK). Standard contractual clauses are model provisions provided by the EU Commission to ensure that your personal data continues to comply with European data protection standards when it is transferred to and stored in third countries (such as the UK). We have agreed standard contractual clauses with Reviews.io to ensure an adequate level of data protection outside the European Union, in particular in the UK.

Through the standard contractual clauses, Reviews.io is committed to maintaining a European level of data protection when processing your personal data, even if the personal data is stored, processed and managed in the UK. These standard contractual clauses are based on an implementing decision of the EU Commission, which you can find at the following link https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Reviews.io has agreed to comply with applicable data protection laws regarding international data transfers.

The data processing agreement, which corresponds to the standard contractual clauses, can be found at https://www.reviews.io/front/data-processing-agreement?v1.

Further information about your personal data processed with Reviews.io can be found in the corresponding data protection policy at https://www.reviews.io/front/business-user-privacy-policy.

Google Maps

This website uses Google Maps to visually display geographic information. Google Maps is an offering of Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to safeguard our legitimate interests, which are overriding in the process of balancing of interests, in an optimized presentation of our offer and easy accessibility to our locations in accordance with Art. 6 (1) 1 lit. f GDPR.

When Google Maps is used, Google transmits and processes data about how website visitors use the Maps functions, which may include, in particular, the IP address and location data. We have no influence over this data processing.

The information collected is stored on Google servers, including in the United States. For these cases, the provider has, according to its own statements, imposed a standard that corresponds to the former EU-US Privacy Shield and has agreed to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to maintain an adequate level of data protection in the third country.

To disable the Google Maps service and thus prevent the transfer of data to Google, you must disable the JavaScript function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent.

Further information about data processing by Google can be found in the Google privacy policy. The Google Maps terms of service contain detailed information about the map service.

Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here.

Google reCAPTCHA

We use the Google reCAPTCHA service on some of the forms on this website to protect against misuse of our web forms and against spam. Google reCAPTCHA is provided by Google Ireland Limited, a company incorporated and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By verifying a manual entry, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. This serves to safeguard our legitimate interests in protecting our website from misuse and in ensuring that our online presence is displayed correctly, which are overriding in the process of balancing of interests, in accordance with Art. 6 (1) (f) GDPR.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to check methods that allow an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to and stored by Google on servers in the United States. In addition, other cookies stored by Google services in your browser are evaluated by Google reCAPTCHA.

Personal data from the input fields of the respective form is not read or stored.

You can prevent the collection of data generated by the JavaScript or the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by preventing the execution of JavaScript or the setting of cookies in your browser settings. Please note that this may limit the functionality of our website for your use.

Further information about Google's privacy policy can be found here.

8. Social media

Our online presence on Facebook

Our presence on social networks and platforms serves to improve active communication with our customers and prospects. We use these platforms to provide information about our products and current promotions. We operate our presence with the following providers:

Facebook, provided by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Instagram, offered by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

When you visit our online social media sites, your data may be automatically collected and stored for market research and advertising purposes. Pseudonyms are used to create so-called user profiles from this data. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually stored on your device. These cookies store visitor behavior and user interests. According to Art. 6 para. 1 lit. f. GDPR, this serves to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, in an optimized presentation of our offer and effective communication with customers and prospects. If you are asked by the respective social media platform operators for consent (agreement) to the data processing, e.g. with the help of a checkbox, the legal basis for the data processing is Art. 6 para. 1 lit. a GDPR.

The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. All of the aforementioned providers maintain, according to their own information, an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded standard data protection clauses with the companies. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered with the social network and logged in or are visiting the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track your movements on the internet. Buttons embedded in websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to offer you customized content or advertising. If you wish to avoid this, you should log out or disable the “stay logged in” function, delete the cookies stored on your device and restart your browser.

Please refer to the providers' data protection policies linked below for detailed information on how they process and use data on their pages, as well as how to contact them and your rights and privacy settings, in particular how to opt out. If you still need help with this, please contact us.

Facebook: https://www.facebook.com/about/privacy/

Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875/?helpref=uf_share

Opt-out:

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/615366948510230/?helpref=uf_share

9. sending evaluation reminders by email

If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) 1 lit. a GDPR, we will use your email address to remind you to submit an evaluation of your order via the evaluation system we use. This consent can be withdrawn at any time by sending a message to the contact option described below.

10. Contact options and your rights

As the data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
pursuant to Art. 16 GDPR, the right to request the immediate correction of incorrect or incomplete personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is

necessary to exercise the right to freedom of expression and information;
to fulfill a legal obligation;
for reasons of public interest or
to assert, exercise or defend legal claims;

pursuant to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as

the accuracy of the data is contested by you;
the processing is unlawful, but you oppose the erasure of the data;
we no longer need the data, but you require it for the establishment, exercise or defense of legal claims; or
you have objected to the processing pursuant to Art. 21 GDPR;

In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, correct, restrict or delete data, or revoke consent granted or object to a particular use of data, please contact us directly using the contact details provided in our imprint.

Right to object

If we process personal data as described above in order to protect our legitimate interests, which are overriding in the process of balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

As of: 01.04.2023