We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.

We, akademie bios – Dr. Ernestina Mazza OG – hereinafter referred to as akademie bios – take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

1.2 Data controller

The data controller for this website is:

akademie bios – Dr. Ernestina Mazza OG (“akademie bios®”)
Bergmanngasse 46/1/2
8010 Graz
Austria

Telephone: +43 699 11 22 54 16
Email: info@akademiebios.eu

The data controller is the natural person who alone determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

The GDPR contact person at akademie bios® is:

Mag. (FH) Clemens Mazza
Telephone: +43 699 1 777 9 111
Email: clemens@akademiebios.eu

1.3 SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “https://” to “https://” and by the padlock icon in your browser bar.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

2. Data collection (general) when visiting our website

2.1 Anonymous or anonymised data

When you use our website for information purposes only – that is, if you do not register or otherwise provide us with information – we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The website we visited
Date and time of access
Amount of data sent in bytes
Source/link from which you accessed this page
Browser used
Operating system used
IP address used (if applicable: in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. We do, however, reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

2.2 Cookies

To make visiting our website an enjoyable experience and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. once you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to varying extents, such as browser and location data, as well as IP addresses. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Where personal data is also processed by individual cookies implemented by us, such processing is carried out in accordance with Article 6(1)(b) of the GDPR, either for the performance of the contract or in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective user experience.

We may work with advertising partners who help us to make our website more interesting for you. To this end, when you visit our website, cookies from partner companies may also be stored on your hard drive (third-party cookies). Where we collaborate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.

Please note that you can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally. Each browser differs in the way it manages cookie settings. This is described in each browser’s help menu, which explains how you can change your cookie settings. You can find these for the respective browsers via the following links:

Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Please note that if you do not accept cookies, the functionality of our website may be restricted.

2.3 Hosting & Content Delivery Network Cloudflare

We reserve the right to use a content delivery network provided by the following provider, Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, where this appears appropriate for the operation of the website.

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Article 6(1)(f) of the GDPR. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

3. Data collection during your interactions with us – via the website or email

3.1 Registration on this website

You may register on our website by providing personal data. The personal data processed for registration is specified in the input form used for registration. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete once you have confirmed your registration by clicking on the link contained in a confirmation email sent to you for this purpose. If you do not confirm your registration within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory. You may provide any further information on a voluntary basis by using our portal.

When you use our portal, we store the data required to fulfil the contract, including any payment details, until you permanently delete your account. We also store any voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and amend all your details in the secure customer area. The legal basis is Article 6(1)(f) of the GDPR.

In addition, we store all content you publish (such as public posts, wall posts, guestbook entries, etc.) in order to operate the website. We have a legitimate interest in providing the website with the full range of user-generated content. The legal basis for this is Article 6(1)(f) of the GDPR. If you delete your account, your public comments – particularly those in the forum – will remain visible to all readers, but your account will no longer be accessible. All other data will be deleted in this case.

3.2 Comment function on this website

When using the comments function on this website, in addition to your comment, details of the time the comment was posted and the username you have chosen will be stored and published on the website. Furthermore, your IP address is also logged and stored. This storage of the IP address is carried out for security reasons and in the event that the data subject infringes the rights of third parties or posts unlawful content by means of a comment submitted. We require your email address so that we can contact you should a third party complain that your published content is unlawful. The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

You, as a user, may subscribe to follow-up comments. You will receive a confirmation email to ensure that you are the owner of the email address provided (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Article 6(1)(a) of the GDPR. You may unsubscribe from current comment subscriptions at any time with future effect; please refer to the confirmation email for further information on how to unsubscribe.

3.3 Contact via form or email

Personal data is collected when you contact us (e.g. via the contact form or by email). The data collected via the contact form is specified in the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR.

When data is submitted via a contact form or an email is sent, it is processed and stored in our Zoho Mail inbox and, where applicable, in Zoho Desk. The provider of Zoho Mail and Zoho Desk is Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands. Your data is stored within Europe in Zoho’s EU cloud.

To protect your data, we have entered into a data processing agreement with Zoho based on the European Commission’s standard contractual clauses, in order to enable the transfer of your personal data to Zoho within the EU.

If the purpose of contacting you is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed. This will be the case when it is clear from the circumstances that the matter in question has been definitively resolved, provided that there are no statutory retention obligations to the contrary.

3.4 Contact via the Zoho Sales IQ live chat system

3.4.1 Anonymised or pseudonymised data

This website uses a live chat system provided by the following provider:
Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands

The processing of personal data transmitted via the chat function takes place either in accordance with Article 6(1)(b) of the GDPR, as it is necessary for the initiation or performance of a contract, or in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in providing effective support to visitors to our website.

Any data you provide in this way will be deleted, subject to any conflicting statutory retention periods, once the matter in question has been conclusively resolved.

In addition, for the purpose of creating pseudonymised usage profiles using cookies, further information may be collected and analysed; however, this information does not serve to identify you personally and is not combined with other data sets. Where this information relates to an individual, processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by adjusting your browser settings accordingly. However, this may restrict the functionality of our website. You may object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time, with effect for the future.

We have entered into a data processing agreement with the service provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

3.4.2 Personal data

When you contact us via the Zoho SalesIQ live chat system, personal data (master data, contact details) may be collected (e.g. your email address to reply to your enquiry in your absence or to send you the chat transcript, if requested). The data collected in the event of a chat or the use of an out-of-office form is specified in the relevant form or within the chat itself. This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

Your data will be deleted once your enquiry has been fully processed and following a waiting period of 18 months (in the event that contact is re-established regarding this matter). The former applies where it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

4 Data processing for order fulfilment in relation to book and media orders

Please also refer to section 3.3 regarding order placement, which covers contacting us via the form or by email.

To process your order, we work with the shipping service provider Artha Verlagsauslieferung, Grüntenseestr. 42, 87466 Oy-Mittelberg, Germany (www.artha.de), which assists us, either in full or in part, with the fulfilment of concluded contracts. The personal data we collect, such as your name and address, will be passed on to this service provider and to the transport company commissioned with the delivery – as part of the contract fulfilment process – to the extent that this is necessary for the delivery of the goods.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Commissioned data processing
We have entered into a data processing agreement with Artha, in which we oblige Artha, among other things, to protect our customers’ data and not to disclose it to third parties.

5 Use of your data for direct marketing

5.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular updates on our services. The only mandatory information required to receive the newsletter is your email address. Providing any further details is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send out the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in future.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of your subscription, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending you promotional communications via the newsletter. You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the data controller named at the beginning of this privacy policy. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this privacy policy.

5.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers by email for goods or services similar to those you have already purchased from our range. In accordance with § 7(3) of the Act against Unfair Competition (UWG), we are not required to obtain your separate consent for this. Data processing in this regard is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time, with effect for the future, by notifying the data controller named at the beginning of this privacy policy. You will only incur transmission costs at the basic rates. Upon receipt of your objection, the use of your email address for marketing purposes will be discontinued immediately.

5.3 Newsletter distribution via Sendinblue

Our email newsletters are sent via this provider:
Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when subscribing to the newsletter to this provider in accordance with Article 6(1)(f) of the GDPR, so that they can handle the dispatch of the newsletter on our behalf.

Subject to your express consent in accordance with Article 6(1)(a) of the GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter’s content. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time with future effect.

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits its disclosure to third parties.

5.4 Advertising by post

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first name and surname, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, sector or business designation in accordance with Article 6(1)(f) of the GDPR, and to use this information to send you interesting offers and information about our products by post.

You may object to the storage and use of your data for this purpose at any time by sending a corresponding message to the data controller.

6. Social media

6.1 Facebook plugins using the Shariff solution

Our website uses so-called social plugins (“plugins”) from the social network Facebook, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

To enhance the protection of your data when visiting our website, these buttons are not embedded as fully functional plugins, but are incorporated into the page solely by means of an HTML link. This method of integration ensures that, when you access a page on our website containing such buttons, no connection is yet established with Facebook’s servers. When you click on the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins there (after entering your login details, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of data by Facebook, and your rights in this regard and the settings available to protect your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php

6.2 LinkedIn plugin as a Shariff solution

Our website uses so-called social plugins (“plugins”) from the online service LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

To enhance the protection of your data when visiting our website, these buttons are not embedded as fully functional plugins, but are incorporated into the page solely by means of an HTML link. This method of integration ensures that, when you access a page on our website containing such buttons, no connection is yet established with LinkedIn’s servers. When you click on the button, a new browser window opens and loads the LinkedIn page, where you can interact with the plugins there (after entering your login details, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of data by LinkedIn, and your rights and settings options regarding the protection of your privacy, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy

6.3 Pinterest plugin as a Shariff solution

The seller’s website uses so-called social plugins (“plugins”) from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

To enhance the protection of your data when visiting our website, these buttons are not embedded as fully functional plugins, but are incorporated into the page solely by means of an HTML link. This method of integration ensures that, when you access a page on our website containing such buttons, no connection is yet established with Pinterest’s servers. When you click on the button, a new browser window opens and loads the Pinterest page, where you can interact with the plugins there (after entering your login details, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of data by Pinterest, and your rights in this regard and the settings available to protect your privacy, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy

6.4 Twitter plugin as a Shariff solution

Our website uses so-called social plugins (“plugins”) from the microblogging service Twitter, which is operated by Twitter International Company, One Cumberland Place, Fenian Street

Dublin 2, D02 AX07, Ireland (“Twitter”).

To enhance the protection of your data when visiting our website, these buttons are not embedded as fully functional plugins, but are incorporated into the page solely by means of an HTML link. This method of integration ensures that, when you access a page on our website containing such buttons, no connection is yet established with Twitter’s servers. When you click on the button, a new browser window opens and loads the Twitter page, where you can interact with the plugins there (after entering your login details, if necessary). Please note that any information collected whilst interacting with the plugin (including your IP address) is transmitted directly from your browser to a server operated by Twitter Inc. in the USA and stored there.

For information on the purpose and scope of data collection, as well as the further processing and use of data by Twitter, and your rights in this regard and the settings available to protect your privacy, please refer to Twitter’s privacy policy: https://twitter.com/privacy

6.5 Xing plugins

The “XING Share Button” is used on this website. When you visit this website, your browser briefly establishes a connection to the servers of XING AG (“XING”), which provide the “XING Share Button” functions (in particular the calculation and display of the counter value). XING does not store any of your personal data when you visit this website. In particular, XING does not store IP addresses. Nor is your usage behaviour analysed via the use of cookies in connection with the “XING Share Button”. You can access the latest privacy information regarding the “XING Share Button” and supplementary information on this website: https://www.xing.com/app/share?op=data_protection

6.6 Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The enhanced data protection mode is used here, which, according to the provider’s information, only initiates the storage of user information once the video(s) is/are played. When playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behaviour. According to information from “YouTube”, these are used, amongst other things, to compile video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be directly linked to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before clicking the button. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. When using YouTube, personal data may also be transferred to the servers of Google LLC in the USA.

Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.

All processing operations described above, in particular the reading of information on the device you are using via the tracking pixel, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, YouTube videos will not be used during your visit to the website.

You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please deactivate this service using the “Cookie Consent Tool” provided on the website or via alternative methods communicated to you on the website.

Further information on data protection on “YouTube” can be found in YouTube’s Terms of Service at https://www.youtube.com/static?template=terms and in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy

6.7 Use of Vimeo videos

Our website incorporates plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Vimeo’s servers. The content of the plugin is transmitted directly from Vimeo to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the relevant page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly link your visit to our website to your Vimeo account. If you interact with the plugins (such as by pressing the play button on a video), this information is also transmitted directly to a Vimeo server and stored there.

If you do not wish Vimeo to link the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

For information on the purpose and scope of data collection, as well as the further processing and use of data by Vimeo, and your rights in this regard and the settings available to protect your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy

Videos from Vimeo embedded on our website automatically incorporate the Google Analytics tracking tool provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This is Vimeo’s own tracking system, to which we have no access and which cannot be influenced by our website. Google Analytics uses so-called “cookies” for tracking; these are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server and stored there; this may also involve transmission to the servers of Google LLC in the USA.

All processing operations described above, in particular the reading of information on the device you are using via the tracking pixel, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Vimeo videos will not be used during your visit to the website.

6.8 Facebook Connect

On our website, you can sign in to create a customer account or to register using the “Facebook Connect” social plugin from the social network Facebook, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), using the so-called single sign-on technology, provided you have a Facebook profile. You can recognise the “Facebook Connect” social plugins on our website by the blue button featuring the Facebook logo and the text “Mit Facebook anmelden”, “Connect with Facebook”, “Log in with Facebook” or “Sign in with Facebook”.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the relevant page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a server operated by Meta Platforms Inc. in the USA, where it is stored. These data processing operations are carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Facebook’s legitimate interest in displaying personalised advertising based on your browsing behaviour.

By using this “Facebook Connect” button on our website, you also have the option to log in or register on our website using your Facebook user data. Only if, prior to the login process and on the basis of a corresponding notice regarding the exchange of data with Facebook, you give your explicit consent in accordance with Article 6(1)(a) of the GDPR, will we receive – when you use the “Facebook Connect” button and depending on the privacy settings you have personally configured on Facebook – the general and publicly accessible information stored in your profile. This information includes your user ID, name, profile picture, age and gender.

Please note that, following changes to Facebook’s privacy policy and terms of use, granting consent may also result in the transfer of your profile pictures, your friends’ user IDs and your friends list, if these have been marked as “public” in your privacy settings on Facebook. The data transmitted by Facebook is stored and processed by us to create a user account containing the necessary details (salutation, first name, surname, address details, country, email address, date of birth), provided that you have made this information available on Facebook. Conversely, based on your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred by us to your Facebook profile.

Consent given may be withdrawn at any time by sending a message to the data controller named at the beginning of this privacy policy.

For information on the purpose and scope of data collection, as well as the further processing and use of data by Facebook, and your rights in this regard and the settings available to protect your privacy, please refer to the data protection information provided by Facebook: https://www.facebook.com/policy.php

If you do not wish Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plugins from loading by using add-ons for your browser, e.g. “Adblock Plus” (https://adblockplus.org/de/).

6.9 Google Sign-In

On our website, you can create a customer account or register via the “Google Sign-In” service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) as part of the so-called single sign-on technology, provided you have a Google account. You can recognise the Google sign-in function on our website by the buttons “Sign in via Google”, “Sign in with Google Account” or “Sign in with Google”.

When you visit a page on our website that contains a Google sign-in function, your browser establishes a direct connection to Google’s servers. The content of the sign-in button is transmitted directly from Google to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the relevant page on our website, even if you do not have a Google account or are not currently logged in to Google. This information (including your IP address) is transmitted directly from your browser to a Google server and stored there; this may also involve transmission to the servers of Google LLC in the USA. These data processing operations are carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interest in displaying personalised advertising based on browsing behaviour.

Through the use of the Google sign-in button on our website, you also have the option to log in or register on our website using your Google account details. Only if, prior to the sign-in process, you give your explicit consent in accordance with Article 6(1)(a) of the GDPR, based on a corresponding notice regarding the exchange of data with Google, will we receive, when using the Google button, depending on the privacy settings you have personally configured on Google, the general and publicly accessible information stored in your profile. This information includes your user ID, name, profile picture, age and gender.

Please note that, following changes to Google’s privacy policy and terms of service, granting consent may also result in the transfer of your profile pictures, your friends’ user IDs and your friends list, if these have been marked as “public” in your privacy settings on Google. The data transmitted by Google is stored and processed by us to create a user account containing the necessary details (salutation, first name, surname, address details, country, email address, date of birth), provided that you have authorised Google to share this information. Conversely, based on your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred by us to your Google profile.

Consent given may be withdrawn at any time by sending a message to the data controller named at the beginning of this privacy policy.

For information on the purpose and scope of data collection, as well as the further processing and use of data by Google, and your rights in this regard and the settings available to protect your privacy, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

You can view the terms of use for “Google Sign-In” here: https://policies.google.com/terms

If you do not wish Google to directly associate the data collected via our website with your Google profile, you must log out of Google before visiting our website. You can also completely prevent the Google plugins from loading by using add-ons for your browser, e.g. “Adblock Plus” (https://adblockplus.org/de/).

7 Online marketing, analytics tools and advertising

7.1 Google Analytics 4 via first-party tracking server

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of website usage.

When using Google Analytics 4, the IP address transmitted by your device whilst you are using the website is, by default and automatically, always collected and processed in an anonymised manner only, so that the information collected cannot be directly linked to any specific individual. This automatic anonymisation is achieved by Google truncating the last few digits of the IP address transmitted by your device within Member States of the European Union (EU) or other signatory states to the Agreement on the European Economic Area (EEA).

On our behalf, Google uses this and other information to analyse your use of the website, to compile reports on your website activity and usage behaviour, and to provide us with further services relating to your use of the website and the internet. In doing so, the IP address transmitted from your device via Google Analytics 4 and truncated as part of this process is not combined with any other data held by Google. The data collected through the use of Google Analytics 4 is retained for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics providing information on the age, gender and interests of website users via a special function known as “demographic characteristics”, based on an analysis of interest-based advertising and using third-party information. This makes it possible to identify and distinguish between different user groups on the website for the purpose of tailoring marketing measures to specific target audiences. However, data collected via “demographic characteristics” cannot be attributed to any specific individual and therefore cannot be linked to you personally. This data collected via the “demographic characteristics” feature is retained for two months and then deleted.

All processing described above will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without your consent, Google Analytics 4 will not be used whilst you are using the website. You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please deactivate this service via the “Cookie Consent Tool” provided on the website.

As an extension of Google Analytics 4, the Google Signals service can also be used on this website. With Google Signals, we can have Google generate cross-device reports (known as “cross-device tracking”). Provided that you have enabled “personalised ads” in your Google Account settings and linked your internet-enabled devices to your Google Account, Google may analyse your usage behaviour across devices, subject to your consent to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, and create database models based on this. This takes into account the logins and device types of all website users who were logged into a Google Account and carried out a conversion. Among other things, the data shows on which device you first clicked on an advert and on which device the relevant conversion took place. When using Google Signals, we do not receive any personal data from Google, but only statistics generated on the basis of Google Signals. You have the option to disable the “personalised ads” feature in your Google Account settings, thereby stopping cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

As an extension of Google Analytics, the “UserIDs” function may also be used on this website. By assigning individual UserIDs, we can have Google generate cross-device reports (so-called “cross-device tracking”). This means that, if you have given your consent to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, your usage behaviour may also be analysed across devices, provided that you have set up a personal account by registering on this website and are logged into your personal account on various devices using your relevant login details. The data collected in this way shows, amongst other things, on which device you first clicked on an advert and on which device the relevant conversion took place.

We have entered into a so-called data processing agreement with Google regarding our use of Google Analytics 4, under which Google is obliged to protect the data of our website users and not to disclose it to third parties.

To ensure compliance with European data protection standards, including in the event of any transfer of data from the EU or the EEA to the USA and any further processing there, Google relies on the European Commission’s so-called standard contractual clauses, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the standard contractual clauses referred to, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

7.2 Matomo Cloud

This website uses a web analytics service provided by the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”)

To protect website visitors, Matomo uses a so-called “config_id” to enable various analyses of website usage within a short time window of up to 24 hours. The site’s “config_id” is a randomly generated, time-limited hash of a limited set of the visitor’s settings and attributes. The config_id or config hash is a string calculated for a visitor based on their operating system, browser, browser plug-ins, IP address and browser language. Matomo does not use device fingerprinting and uses an anonymised IP address of the site visitor to generate the “config_id”.

Where the information processed in this way includes personal user data, such processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. To object to the processing of your visitor data in future, we provide a separate option to object on our website.

The data collected using Matomo technology is transferred to Matomo’s servers in New Zealand and processed for the purposes of analysing usage.

Where data is transferred to the service provider’s location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

7.3 Google Tag Manager

This website uses “Google Tag Manager”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). Google Tag Manager provides a technical framework for bundling various web applications, including tracking and analytics services, and for calibrating them, controlling them and making them subject to conditions via a single user interface.

Google Tag Manager itself does not store any information on users’ devices or read such information from them. Nor does the service carry out any independent data analysis.

However, when you visit the page, Google Tag Manager transmits your IP address to Google, where it may be stored. It may also be transmitted to servers operated by Google LLC in the USA.

This processing will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website.

You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please deactivate this service using the “Cookie Consent Tool” provided on the website. We have entered into a data processing agreement with Google, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google relies on the European Commission’s so-called standard data protection clauses, which are intended to ensure compliance with European data protection standards in the USA.

Further information on data protection relating to Google Tag Manager can be found here: https://support.google.com/tagmanager/answer/9323295?hl=de

Separate information regarding data protection-related services and applications that have been consolidated in Google Tag Manager is provided in the relevant sections of this privacy policy.

7.4 Facebook Pixel for creating Custom Audiences (with Cookie Consent Tool)

Our website uses the so-called “Facebook Pixel” from the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

If a user clicks on an advert placed by us and displayed on Facebook, an additional element is appended to the URL of our linked page by Facebook Pixel. Provided that our site permits the sharing of data with Facebook via the Pixel, this URL parameter is stored in the user’s browser via a cookie, which is set by our linked page itself. This cookie is then read by the Facebook Pixel, enabling the data to be forwarded to Facebook.

With the help of the Facebook Pixel, Facebook is able, on the one hand, to identify visitors to our website as a target group for the display of adverts (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to ensure that the Facebook Ads we place are shown only to those Facebook users who have demonstrated an interest in our online offering or who exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the webpages visited), which we transmit to Facebook (so-called “Custom Audiences”). We also use the Facebook Pixel to ensure that our Facebook Ads match users’ potential interests and do not come across as intrusive. This enables us to further evaluate the effectiveness of Facebook adverts for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advert (known as a “conversion”).

The data collected is anonymous to us; therefore, it does not allow us to identify individual users. However, the data is stored and processed by Facebook, meaning that a link to the relevant user profile is possible and Facebook may use the data for its own advertising purposes, in accordance with Facebook’s Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements both on and off Facebook.

The data processing associated with the use of the Facebook Pixel takes place exclusively with your express consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. To withdraw your consent, remove the tick next to the “Facebook Pixel” setting in the “Cookie Consent Tool” embedded on the website.

7.5 Google Ads and Google Conversion Tracking

This website uses the online advertising programme “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the Google Ads service to draw attention to our attractive offers on external websites by means of advertising (so-called Google AdWords). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. Our aim is to show you adverts that are of interest to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page. Each Google Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected via the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who have clicked on their advert and been redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.

Details on the data processing triggered by Google Ads conversion tracking and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing operations described above, in particular the setting of cookies to read information from the device being used, will only be carried out if you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available via the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available, or may only be available to a limited extent, if you have disabled cookies.

Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/

7.6 Google Ads Remarketing

Our website uses Google Ads Remarketing features; we use these to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Data processing only takes place if you have given Google your consent for your internet and app browsing history to be linked to your Google Account and for information from your Google Account to be used to personalise the adverts you see on the web. In this case, if you are logged in to Google whilst visiting our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To this end, your personal data is temporarily linked by Google with Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Ads Remarketing will not be used whilst you are visiting the site.

You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please deactivate this service using the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available via the following link: https://support.google.com/ads/answer/7395996?

Further information and the data protection provisions regarding advertising and Google can be viewed here:

https://www.google.com/policies/technologies/ads/

7.7 Sendinblue Tracker

This website uses the Sendinblue Tracker, a software-based marketing tool provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin.

The Sendinblue Tracker enables lead generation, centralised email and newsletter marketing, and effective contact management through user segmentation. Recurring visit and behaviour patterns can also be recorded and analysed. To fulfil these various functions, Sendinblue uses cookies – small text files that are stored locally in your web browser’s cache on your device – which enable us to analyse your use of the website. In doing so, the cookies collect certain information, such as your IP address, location, the time the page was accessed, and other details. Information collected via Sendinblue is stored on Sendinblue’s servers and analysed on our behalf.

All processing operations described above, in particular the setting of cookies to read information from the device you are using, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, the Sendinblue tracker will not be used during your visit to the website.

Further legal bases for data processing that apply in the context of specific Sendinblue services (such as the requirement for explicit consent under Article 6(1)(a) of the GDPR when sending newsletters) remain unaffected by this.

We have entered into a data processing agreement with Sendinblue, under which we oblige Sendinblue to protect our customers’ data and not to disclose it to third parties.

You can find further information about Sendinblue’s privacy policy at the following web address: https://de.sendinblue.com/legal/privacypolicy/

8. Tools and miscellaneous

8.1 Google reCAPTCHA

On this website, we use the reCAPTCHA feature provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an input is made by a natural person or, abusively, through machine-based and automated processing. The service involves the transmission of the IP address and, where applicable, further data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam.

Google uses “Google Fonts” – fonts downloaded by Google from the internet – for the visual design of the CAPTCHA window. No information other than that mentioned above, which is already transmitted to Google via the reCAPTCHA functionality, is processed in this context.

When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

8.2 Google Maps

On our website, we use Google Maps (API) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive maps to present geographical information visually. By using this service, our location is displayed to you, making it easier for you to find your way here.

As soon as you access any of the subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the USA and stored there. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such analysis is carried out in particular in accordance with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interests in displaying personalised advertising, conducting market research and/or tailoring its website to users’ needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

Google LLC, based in the USA, is certified under the US-EU data protection agreement “Privacy Shield”, which ensures compliance with the data protection standards applicable in the EU.

If you do not consent to your data being transmitted to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by turning off JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available for use.

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

8.3 Google Web Fonts stored locally

This site uses so-called web fonts to ensure consistent font display; we have cached these locally. When you visit a page, your browser loads the required web fonts from our web server into your browser cache to display text and fonts correctly.

8.4 Google Customer Reviews (formerly the Google Certified Retailer Programme)

We collaborate with Google as part of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme enables us to collect customer reviews from users of our website. Following a purchase on our website, you will be asked whether you would like to take part in an email survey from Google. If you give your consent in accordance with Article 6(1)(a) of the GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The review you submit will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and on our Merchant Center dashboard. Your review will also be used for Google Seller Ratings. When using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the USA.

You may withdraw your consent at any time by sending a message to the data controller or to Google.

Further information on Google’s data protection practices in connection with the Google Customer Reviews programme can be found at the link below: https://support.google.com/merchants/answer/7188525?hl=de

You can find further information on data protection relating to Google Seller Ratings via this link: https://support.google.com/google-ads/answer/2375474

8.5 Zoom

We use the “Zoom” service provided by Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter “Zoom”) to hold online meetings, video conferences and/or webinars.

When using Zoom, various types of data are processed. The scope of the data processed depends on what information you provide before or during your participation in an online meeting, video conference or webinar. When using Zoom, data relating to the participants in the communication is processed and stored on Zoom’s servers. This data may include, in particular, your login details (name, email address, telephone number (optional) and password) and meeting data (topic, participant’s IP address, device information, description (optional)). In addition, participants’ visual and audio contributions, as well as voice input in chats, may be processed.

Where personal data is processed that is necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Article 6(1)(b) of the GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing is carried out on the basis of Article 6(1)(a) of the GDPR. Consent that has been given may be withdrawn at any time with effect for the future.

Furthermore, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in the effective conduct of the online meeting, webinar or video conference. Further information on Zoom’s use of data can be found in Zoom’s privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html

8.6 Provenexpert widget

We use the Provenexpert seal on our website, a widget provided by Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin (“Provenexpert”). When you visit our website, dynamic content (current shop rating, certificate, etc.) is loaded into the widget from Provenexpert’s servers. In doing so, information about the website you previously visited, the date and time of the request, the volume of data transferred, the type of browser used, the operating system you are using and the requesting provider (referrer data) may be transmitted to Provenexpert’s servers. Where this also includes personal data, processing is carried out on the basis of our overriding legitimate interest in optimising our services in accordance with Article 6(1)(f) of the GDPR.

Further information on data protection at Provenexpert can be found at: https://www.provenexpert.com/de-de/datenschutzbestimmungen/

8.7 Gravity Forms

We use the “Gravity Forms” service provided by Rocketgenius Inc., 1620 Centerville Turnpike STE 102, Virginia Beach, VA 23464, USA (Gravity Forms) for conducting surveys or for online forms. Gravity Forms enables us to design and analyse surveys and online forms. In addition to the personal data you enter into the forms, information regarding your operating system, browser, the date and time of your visit, the referrer URL and your IP address is also collected, transmitted to Gravity Forms and stored on Gravity Forms’ servers. The information you enter into the forms is stored in a password-protected manner to ensure that third-party access is prevented and that only we can process the data for the purpose specified in the respective form.

We have entered into a data processing agreement with Gravity Forms for the use of the aforementioned services, which obliges Gravity Forms to protect the data of our website visitors and not to pass it on to third parties. Data processing generally takes place within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. However, data transfers to the USA cannot be ruled out.

With regard to the transfer of data from the EU to the USA, Gravity Forms relies on the European Commission’s so-called standard data protection clauses, which are intended to ensure compliance with European data protection standards in the USA.

Further information and Gravity Forms’ privacy policy can be found at: https://www.gravityforms.com/privacy/

8.8 Cookie Consent Tool

This website uses the “Real Cookie Banner” cookie consent tool to obtain valid user consent for cookies, cookie-based applications and similar technologies (tracking pixels, web beacons, etc.) that require consent. You can find details on how “Real Cookie Banner” works at https://devowl.io/de/rcb/datenverarbeitung/.

The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted by ticking the relevant boxes. Through the use of this tool, all cookies and services requiring consent are only loaded once the relevant user has given their consent by ticking the appropriate boxes. This ensures that such cookies are only set on the user’s device once consent has been given.

The tool sets technically necessary cookies to save your cookie preferences.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we will be unable to manage your consents.

If, in the course of use, the processing of personal data (such as the IP address) occurs for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

A further legal basis for processing is Article 6(1)(c) of the GDPR. As the data controller, we are subject to the legal obligation to make the use of technically non-essential cookies conditional upon the user’s consent.

Further information on the operator and the configuration options for the cookie consent tool can be found directly in the relevant user interface on our website.

8.9 Wordfence

For security purposes, this website uses the “Wordfence” plugin, a service provided by Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”). The plugin protects the website and the associated IT infrastructure against unauthorised third-party access, cyber-attacks, viruses and malware. Wordfence collects users’ IP addresses and, where applicable, further data relating to their behaviour on our website (in particular, URLs accessed and header information) in order to detect and prevent unauthorised access to the site and other threats. In doing so, the recorded IP address is compared with a list of known attackers. If the recorded IP address is identified as a security risk, Wordfence may automatically block it from accessing the site. The information collected in this way is transferred to a server operated by Defiant Inc. in the USA and stored there.

The data processing described is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interests in protecting the website from harmful cyber-attacks and in safeguarding structural and data integrity and security.

Defiant Inc. invokes the standard data protection clauses pursuant to Article 46(2)(c) of the GDPR as the legal basis for the transfer of data to the USA.

If visitors to the website have login rights, Wordfence also places cookies (= small text files) on the visitor’s device. These cookies enable certain location and device information to be retrieved, which allows an assessment to be made as to whether the logged-in access originates from an authorised person. At the same time, the cookies allow access rights to be evaluated and granted via an internal website firewall in accordance with the authorisation level. Finally, the cookies serve to record irregular access attempts by site administrators from new devices or new locations and to notify other administrators of this.

These cookies are only set if a user has login rights. Wordfence does not set any cookies for site visitors without login authorisation.

Where personal data is processed via cookies, such processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in preventing unauthorised access to the website administration and in defending against unauthorised administrator access.

We have entered into a Data Processing Agreement with Defiant Inc., under which we oblige the company to protect the data of website visitors and not to disclose it to third parties.

Further information on Defiant Inc.’s use of data for Wordfence can be found in Wordfence’s privacy policy at https://www.wordfence.com/privacy-policy/.

8.10 Cloudflare

For security purposes, this website uses the firewall service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).

Cloudflare protects the website and the associated IT infrastructure from unauthorised third-party access, cyber-attacks, viruses and malware. Cloudflare collects users’ IP addresses and, where applicable, further data regarding their behaviour on our website (in particular, URLs accessed and header information) in order to detect and prevent unauthorised access to the site and potential threats. In doing so, the recorded IP address is compared against a list of known attackers. If the recorded IP address is identified as a security risk, Cloudflare may automatically block it from accessing the site. The information collected in this way is transferred to a server operated by Cloudflare Tech, Inc. in the USA and stored there.

Cloudflare, Inc. relies on the standard data protection clauses pursuant to Article 46(2)(c) of the GDPR as the legal basis for the transfer of data to the USA.

We have entered into a Data Processing Agreement with Cloudflare, Inc., whereby we oblige the company to protect the data of website visitors and not to disclose it to third parties.

Further information on Cloudflare’s use of data is available at https://www.cloudflare.com/privacypolicy/

9 Use of affiliate programmes

9.1 Own affiliate programme

In connection with the product presentations on our website, we operate our own affiliate programme, under which we provide interested third-party website operators with affiliate links to place on their websites, which lead to our offers. Cookies are used for the affiliate programme; these are generally set on the partner’s website after clicking on a corresponding affiliate link, and we are not responsible for them under data protection law. Cookies are small text files stored on your device to enable us to trace the origin of transactions (e.g. “sales leads”) generated via such links. This enables us, amongst other things, to recognise that you have clicked on the partner link and been redirected to our website. This information is required for the processing of payments between us and the affiliate partners. Where the information also contains personal data, the processing described is carried out on the basis of our legitimate financial interest in the processing of commission payments in accordance with Article 6(1)(f) of the GDPR.

If you wish to block the tracking of user behaviour via cookies, you can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can disable the acceptance of cookies in specific cases or generally.

9.2 Amazon Associates Programme (AmazonPartnerNet)

We participate in the “AmazonPartnerNet” affiliate programme run by Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg (hereinafter “Amazon”). In this context, we have placed advertisements on our website in the form of links that lead to offers on various Amazon websites. Amazon uses cookies. These are small text files stored on your device to enable the tracking of the origin of orders generated via such links. Among other things, this allows Amazon to recognise that you have clicked on the affiliate link on our website. This information is required for payment processing between us and Amazon. Where the information also contains personal data, the processing described is carried out on the basis of our legitimate financial interest in the processing of commission payments with Amazon in accordance with Article 6(1)(f) of the GDPR.

Further information on Amazon’s use of data can be found in the Amazon.de Privacy Policy at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please follow the procedure for lodging an objection as described above.

10 Rights of the data subject

Under current data protection law, you have comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data; we set out these rights below:

10.1 Right of access pursuant to Article 15 of the GDPR

In particular, you have the right to be informed about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance for you and the intended consequences of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries;

10.2 Right to rectification pursuant to Article 16 of the GDPR

You have the right to have any inaccurate data concerning you rectified without delay and/or to have any incomplete data we hold about you completed;

10.3 Right to erasure pursuant to Article 17 of the GDPR

You have the right to request the erasure of your personal data where the conditions set out in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

10.4 Right to restriction of processing pursuant to Article 18 of the GDPR

You have the right to request the restriction of the processing of your personal data, whilst the accuracy of your data, which you dispute, is being verified; if you object to the erasure of your data on the grounds of unlawful data processing and instead request the restriction of the processing of your data; if you require your data for the establishment, exercise or defence of legal claims after we no longer need the data once the purpose has been fulfilled, or if you have lodged an objection on grounds relating to your particular situation, whilst it remains to be determined whether our legitimate grounds override yours;

10.5 Right to be informed pursuant to Article 19 of the GDPR

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the data controller, the data controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

10.6 Right to data portability pursuant to Article 20 of the GDPR

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another data controller, insofar as this is technically feasible;

10.7 Right to withdraw consent in accordance with Article 7(3) of the GDPR

You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal ground permitting processing without consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent up until the time of withdrawal;

10.8 Right to lodge a complaint pursuant to Article 77 of the GDPR

If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred.

The competent supervisory authority for data protection matters is the Provincial Data Protection Commissioner of the federal state of Styria, where our company is based. A list of data protection officers and their contact details can be found via the following link: https://www.dsb.gv.at/kontakt

10.9 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

11 Retention period for personal data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing and – where applicable – additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR, such data shall be stored until the data subject withdraws their consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Article 6(1)(b) of the GDPR, such data shall be routinely deleted upon expiry of the retention periods, provided that it is no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data shall be stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.

When processing personal data for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data shall be stored until the data subject exercises their right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information contained in this privacy policy regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Privacy policy

1. Information on the collection of personal data and the contact details of the data controller

1.1 Data collection