PRIVACY POLICY
THE DATA PRIVACY STATEMENT of www.macris.shop
This privacy policy explains how we process your personal data in connection with our website at www.macris.shop.
Contents
I. Definitions of terms
II General information
1. person responsible for data processing
2. contact details of the data protection officer
3. information on processing operations
4. rights of data subjects
5. erasure and restriction of personal data
6. consent to the transfer of personal data to the USA
7. cookie banner of Wix.com
III Individual processing operations
1. hosting
2. access data and log files
3. registration / user account
4. contract data
5. sevdesk
6. applications
7. general contact
8. contact form
9. chat
10 WhatsApp
11. newsletter
12. direct e-mail advertising to customers
V. Statistics and analysis
1. HubSpot
2. meta pixel
VI Payment service provider
1. PayPal
2 Wix Payments
VI Review portals
1. trustpilot
VII Google services
1 Google Analytics
2. demographic characteristics in Google Analytics
2 Google Analytics Remarketing
3. Google AdWords with conversion tracking
I. Definitions
‘Personal data’ means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
II General information
1. controller for data processing
MACRIS GmbH
Marion Krauss-Warner
Königstraße 27
70173 Stuttgart, Germany
E-mail: info@macris.shop
Phone: +49 15221712412
2. contact details of the data protection officer
We have not appointed a data protection officer and are not obliged to do so.
3. information on processing operations
We point out the respective legal basis of individual processing operations. If we intend to transfer data to third countries outside the European Union (EU) or the European Economic Area (EEA), this will also be indicated.
4. rights of data subjects
As a data subject, you have the following rights:
- In accordance with Art. 15 GDPR, you can request information about your personal data processed by us; you can also request information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the origin of your data if it has not been collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about its details such as logic, scope and effects, the existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing and the right to object to such processing. the existence of automated decision-making, including profiling and, where applicable, meaningful information about its logic, scope and impact, the existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing or to object to such processing, the existence of the right to lodge a complaint with a supervisory authority; finally, you have the right to obtain information as to whether personal data have been transferred to a third country or to an international organisation and, where that is the case, as to the appropriate safeguards relating to the transfer;
- in accordance with Art. 16 GDPR, you can request the immediate correction of incorrect or the completion of your personal data stored by us
- in accordance with Art. 17 GDPR, you may request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims
- in accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, you no longer need the data for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR, but it has not yet been determined whether our legitimate reasons for processing the data outweigh your interests;
- in accordance with Art. 20 GDPR, you may request the provision of your personal data that you have provided to us in a structured, commonly used and machine-readable format or the transfer to another controller
- in accordance with Art. 21 GDPR, you may object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising and the legal basis for the processing of personal data is legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR
- in accordance with Art. 7 para. 3 GDPR, you can revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
- in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. A list with contact details of the data protection officers in the federal states can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
If you would like to assert the aforementioned data subject rights, you can contact us or our data protection officer at any time using the contact details provided above.
5 Deletion and restriction of personal data
Unless otherwise stipulated in this privacy policy for individual cases, personal data will be erased if this data is no longer necessary for the purposes for which it was collected or otherwise processed and the erasure does not conflict with any statutory retention obligations.
We delete the personal data processed by us under the conditions of Art. 17 GDPR upon request. Personal data that is required for other and legally permissible purposes will not be deleted. This applies, for example, to personal data that is necessary for the pursuit of any claims to which we are entitled or for the defence against claims asserted against us or that must be retained by us for commercial or tax law reasons.
6. consent to the transfer of personal data to the USA
If we ask you for your consent in accordance with Art. 49 (1) (a) GDPR as the legal basis for the transfer of data to the USA and/or other third countries, the following conditions apply to this consent:
a. Your personal data may be transferred to a country or international organisation outside the European Union (EU) or the European Economic Area (EEA) whose level of data protection law does not comply with European or German data protection law. Personal data is transferred subject to legal or contractual authorisations in accordance with the requirements of Article 44 et seq. GDPR are transmitted. This means that the country in question has an adequacy decision from the EU Commission in accordance with Art. 45 GDPR, suitable guarantees for data protection in accordance with Art. 46 GDPR or binding internal data protection regulations in accordance with Art. 47 GDPR. Further information can be found in the explanations of the respective processing operations in this privacy policy.
b. For some countries, in particular the USA, there is no adequacy decision by the EU Commission pursuant to Art. 45 GDPR, and it may not be possible to establish an adequate level of data protection that corresponds to data protection in the European Union either through suitable guarantees for data protection pursuant to Art. 46 GDPR or through binding internal data protection regulations pursuant to Art. 47 GDPR. There is a risk that these third countries do not offer an adequate level of protection. There may be no supervisory authority and/or no data processing principles in these third countries and/or you as the data subject may not be entitled to any data protection rights in the third country. This means that you may not have sufficient legal remedies available to you in the event of violations of your rights in these countries in order to defend yourself against legal violations.
7. cookie banner from Wix.com
We use cookies as part of our website. Cookies are small text files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses or other malware. Information is stored in a cookie that results in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.
We use the Wix.com shop system for our website. We use this system to create a cookie banner and an overview of the cookies we use for our website. You can view this overview via the button on our homepage.
Consent is not required for cookies that are absolutely necessary to store information on your end device or to access information already stored on your end device so that we can provide you with the services you have expressly requested on our website at your request, in accordance with Section 25 (2) No. 2 TTDSG.
You can also use the button on our homepage to see which types of cookies you have consented to for our website. This information is read from the cookie stored in your browser by Wix.com.
If necessary, we will also obtain your consent to the use of cookies and the associated data processing by other services via the Wix.com cookie banner. For each individual cookie, the name of the cookie, the purpose that the cookie is intended to fulfil, any third-party access to the cookie and the duration of the function and the period after which a cookie is deleted are specified. Session cookies are deleted after the end of your use of our website or after the end of the browser session.
The Wix.com cookie banner records the date, time and scope of the consent you have given. If you use the form displayed on our website via the Wix.com cookie banner to agree or refuse that additional cookies may be set on your end device by our website in addition to the required cookies, the Wix.com cookie banner stores this consent or refusal in cookies on your end device for one year.
From these cookies stored in your browser or end device by the Wix.com cookie banner, our website can read out which cookies we are allowed to set on subsequent visits. You can change or withdraw the declarations of consent you have given at any time by clicking on the button on our homepage. Alternatively, you can also delete the cookies set by our website in your end device or browser. You will then be asked to give your consent again when you visit our website again.
The use of the Wix.com cookie banner helps us to obtain the necessary consent in an appropriate form for our website in order to be able to use cookies lawfully. By clicking on the activation button, you consent to us storing and processing your personal data as described. Without this data transfer, it is not possible to use cookies that are not required and the associated services on our website. The legal basis for the processing of your personal data is your consent in accordance with Section 25 (1) TTDSG in conjunction with Art. 6 (1) (a) GDPR.
For some processing operations, we also obtain your consent to the transfer of your data to third countries outside the EU or the EEA via the Wix.com cookie banner. This consent is subject to the conditions set out in Section II. 6.
III Individual processing operations
1. hosting
Our online shop uses the website and shop system Wix.com. The provider is Wix.com Ltd, Nemal St. 40, 6350671 Tel Aviv, Israel. The controller for data subjects in the EU is Wix Online Platforms Limited, 1 Grant's Row, Dublin 2 D02HX96, Ireland (hereinafter ‘Wix.com’).
Your contract data and other data entered by you in our online shop will be processed by Wix.com on our behalf and transferred to Wix.com Ltd. in Israel and, if necessary, to third countries outside the EU or the EEA. The EU Commission has issued an adequacy decision for Israel, which can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32011D0061. It is therefore permissible to transfer personal data to Israel in accordance with Art. 45 (1) GDPR. The personal data collected may also be stored on servers in third countries outside the EU or the EEA. If there is no adequacy decision by the EU Commission for these countries, Wix.com has concluded standard contractual clauses to fulfil the EU's requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on the use of the standard contractual clauses by Wix.com can be found at https://de.wix.com/about/privacy-dpa-users.
2. access data and log files
When you access our website or the individual pages, the browser on your device automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider.
The following information is stored
- IP address of the requesting computer;
- Date and time of access;
- Name and URL of the retrieved file;
- Website from which the access was made (referrer URL);
- Screen resolution, device pixel ratio (DPR), configured language, local IP address of the user, browser used and GMT offset of the browser (time zone) and, if applicable, the operating system and the type of your end device;
- Geolocalisation;
- Status codes and amount of data transferred;
- Name of your access provider.
This data is processed for the following purposes
- Provision of the website, including all functions and content;
- Ensuring a smooth connection to the website;
- Ensuring convenient use of our website;
- Ensuring system security and stability;
- Anonymised statistical evaluation of access;
- Optimisation of the website;
- In the event of (possible) legal disputes for the defence or assertion of claims
- Disclosure to authorities in the event of suspected unlawful acts, for example in the event of an unlawful intrusion/attack on our systems or a corresponding suspicion or other criminal offence;
This data will be deleted if it is no longer required for other purposes (e.g. defence or assertion of claims).
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection described above.
3 Registration / user account
You can register for our website. To do so, you must provide your name, email address, telephone number and address.
Registration is voluntary and is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your consent. Your data will be used for the purposes of our offer and to contact you for information relevant to the offer and registration. You can view and change your data via a personal user account. Your data will be stored until you delete your user account or instruct us to delete your data. If we have to store your personal data due to legal obligations, in particular under tax and commercial law, the processing of your personal data will be restricted accordingly until the retention periods expire. This data will then be deleted.
If you register for our offer or use the user account, we store the IP address and the time of the respective usage action. The storage takes place on the basis of our and your legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to provide our offer and to protect against misuse and other unauthorised use. The user account and the data stored in this context are also used in particular to facilitate shopping, to access your order history and to be able to write customer reviews. This data is not passed on to third parties unless it is necessary for the fulfilment of contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR or for the pursuit of any claims to which we are entitled or defence against claims asserted against us or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR. The IP addresses are deleted if they are no longer required for the aforementioned purposes.
4. contract data
In connection with and for the purpose of fulfilling pre-contractual measures and contractual obligations via our website, which are carried out at your request, we process the data necessary for the fulfilment of the contract.
This includes
- Data of the contractual partner, such as name, e-mail address- telephone number, address and contact details, date of birth, any different delivery or invoice addresses or recipients;
- Contract data, e.g. items ordered, customer category;
- Payment data such as bank details, credit card details, payment history.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
The data will only be passed on to third parties to the extent that this is necessary for the fulfilment of pre-contractual measures and contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR (e.g. to banks, payment service providers, credit card companies for processing payments and to shipping service providers for shipping goods) or to pursue any claims to which we are entitled in accordance with Art. 6 para. 1 lit. f GDPR or if there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR.
5. sevdesk
We use the accounting solution Sevdesk. The provider is sevDesk GmbH, Im unteren Angel 1, 77652 Offenburg (hereinafter ‘sevdesk’). Your contract data is processed by sevdesk on our behalf. The personal data collected may also be stored on servers in third countries outside the EU or the EEA. If there is no adequacy decision by the EU Commission for these countries, sevdesk has concluded standard contractual clauses to fulfil the requirements of the EU to legitimise the transfer of personal data to third countries outside the EU or the EEA. Information on the use of the standard contractual clauses by sevdesk can be found at https://cdn.prod.website-files.com/65c9eb8b18a74904c71e4d3c/66670f39f1199a8fdc431d29_liste_der_subunternehmer.pdf.
6. job applications
If you apply for a job with us, you must provide your name and contact details and send us your application documents so that we can review your application and contact you. In the application process, your data will be processed in accordance with Section 26 (1) BDSG. The purpose of the processing is participation in an application procedure advertised by us or, in the case of an unsolicited application, to check whether we can offer you a position. Without this consent, you will not be able to participate in the application process.
The following data is typically processed in our application process
- Your cover letter for the application;
- Your personal data: Name, address, email address, telephone number, mobile number, date of birth;
- Your CV: current job, previous jobs, employer, professional training, years of professional experience, previous training, special skills, hobbies
- Documents such as certificates from educational institutions and/or previous jobs, certificates of completed further training.
All personal data collected in connection with the application process will also be stored on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR so that we can defend ourselves against claims asserted against us. If you withdraw your application of your own accord, we will delete your application documents. Your name and contact details as well as the dates on which you applied and/or withdrew from the application process and the corresponding correspondence will remain stored.
If this data is no longer required for other purposes (e.g. subsequent recruitment or legal disputes), the data will be deleted six months after the end of the application process.
7 General contact
If you contact us using the contact details published on our website (e.g. by e-mail) and provide us with personal data, we will use this data to process your request on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR, provided that your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and/or in our legitimate interest in the effective processing of enquiries addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All personal data collected during a general contact will be deleted after your enquiry has been dealt with, unless the data is required for other processes (e.g. subsequent conclusion of a contract or defence against claims asserted against us) or must remain stored for other reasons (e.g. due to mandatory statutory retention periods).
8. contact form
If you use the contact form, you must provide your name and email address and/or other contact details as well as the subject of your enquiry so that we can contact you and process your enquiry. We use your data to process your request on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR, provided that your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and/or in our legitimate interest in the effective processing of enquiries addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All personal data collected via our contact form will be deleted after your enquiry has been dealt with, unless the data is required for other processes (e.g. subsequent conclusion of a contract or defence against claims asserted against us) or must remain stored for other reasons (e.g. due to mandatory statutory retention periods).
9 Chat
If you use the chat function, you must provide the subject of your enquiry and, if applicable, your name and email address and/or other contact details so that we can communicate with you and process your enquiry. We use your data to process your request on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR, provided that your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and/or in our legitimate interest in the effective processing of enquiries addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All personal data collected via our chat function will be deleted after your enquiry has been dealt with, unless the data is required for other processes (e.g. subsequent conclusion of a contract or defence against claims asserted against us) or must remain stored for other reasons (e.g. due to mandatory statutory retention periods).
10 WhatsApp [PZ1] [CR2]
We also use the WhatsApp service to communicate with you. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter ‘WhatsApp’). WhatsApp is an instant messenger service that you can use to contact us directly. When using WhatsApp, personal data is processed by WhatsApp to provide the service on our behalf. The data may also be processed on servers in the USA. In order to use WhatsApp, you must have a WhatsApp user account. The legal basis for data processing by WhatsApp is the consent voluntarily given by you in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your contacting us via the WhatsApp account offered by us. The legal basis for the transfer of data to the USA when using WhatsApp is your consent, also given voluntarily, in accordance with Art. 49 para. 1 lit. a GDPR. Your consent to the transfer of your data to third countries outside the EU or the EEA is subject to the conditions set out in Section II. 6.
If you have contacted us via WhatsApp, WhatsApp already uses the personal data that you have provided in your account, in particular your status message, your name and the images that you have stored in your account. This data is also transmitted to us when you contact us via WhatsApp. In addition, the message and any attachments that you send us via WhatsApp will also be transmitted to us.
We use your data to process your request on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and/or in our legitimate interest in the effective processing of enquiries addressed to us in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All personal data collected via our contact form will be deleted after your enquiry has been dealt with, unless the data is required for other processes (e.g. subsequent conclusion of a contract or defence against claims asserted against us) or must remain stored for other reasons (e.g. due to mandatory statutory retention periods).
The information and personal data collected by WhatsApp in connection with the provision of the respective service may be transferred to WhatsApp servers in the USA and stored there. The personal data collected may be stored on servers in the USA. WhatsApp has entered into Standard Contractual Clauses to comply with EU requirements to legitimise the transfer of personal data to third countries outside the EU or EEA. Information on WhatsApp's use of the Standard Contractual Clauses can be found at https://www.whatsapp.com/legal/privacy-policy-eea#privacy-policy-our-global-operations.
Further information on how WhatsApp handles your personal data can be found in the relevant privacy policy: https://www.whatsapp.com/legal/.
11 Newsletter
If you would like to receive our newsletter, we need your email address. Your data will be processed in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent given in the so-called double opt-in procedure. Your data will be used for this purpose and stored until you withdraw your consent or unsubscribe from the newsletter. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your cancellation/unsubscribe request at any time to the email address stated under Section II.
We transmit your data to a service provider for processing on our behalf in order to enable you to subscribe to and unsubscribe from our newsletter, to send the newsletter and to analyse the use of the newsletters sent.
The newsletter is sent via HubSpot.
The provider of HubSpot and responsible for the processing of personal data is HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin.
HubSpot is used to send and analyse the reach of our newsletter. For this purpose, your e-mail address and any other data required by HubSpot for the provision of the newsletter will be processed on our behalf.
We process the following data:
- Identification and contact data (name, date of birth, gender, general, professional or other demographic information, address, title, contact details, including email address);
- personal interests or preferences (including purchase history, marketing preferences and publicly available profile information on social media)
- Financial information (credit card, account, payment details).
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access was made (referrer URL),
- browser used and, if applicable, the operating system of your end device,
- Geolocalisation of your end device and
- the type of device used.
The personal data collected may be stored on servers in third countries outside the EU or the EEA. HubSpot only transfers personal data to recipients in the USA if these recipients are certified under the EU-US data protection framework, have committed to complying with European data protection standards and thus fulfil the EU requirements for legitimising the transfer of personal data to the USA. Information on the voluntary commitment of HubSpot's affiliated group companies in the USA can be found at https://legal.hubspot.com/de/dpa. The recipients have concluded standard contractual clauses with HubSpot in order to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on HubSpot's use of the standard contractual clauses can be found at https://legal.hubspot.com/de/dpa.
12. direct email marketing to customers
If you are a customer of ours and we have received your email address in connection with the sale of a good or service, we may use your email address for direct marketing for our own similar goods or services. This only applies if you have not objected and we clearly inform you of the possibility of objection when collecting the e-mail address and each time it is used. For direct advertising by email, we process your email address, your name, if you work for a company, your company affiliation and the type of goods or services you have purchased from us. The legal basis for processing is Section 7 (3) UWG and our legitimate interest in direct marketing in accordance with Art. 6 (1) (f) GDPR.
Our direct email advertising is sent via HubSpot.
V. Statistics and analysis
1 HubSpot
We use the HubSpot tracking code as part of our website. HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany, is responsible for the processing of personal data.
The personal data collected may be stored on servers in third countries outside the EU or the EEA.
HubSpot only transfers personal data to recipients in the USA if these recipients are certified under the EU-US data protection framework, have committed to complying with European data protection standards and thus fulfil the EU requirements for legitimising the transfer of personal data to the USA. Information on the voluntary commitment of HubSpot's affiliated group companies in the USA can be found at https://legal.hubspot.com/de/dpa. The recipients have concluded standard contractual clauses with HubSpot in order to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on HubSpot's use of the standard contractual clauses can be found at https://legal.hubspot.com/de/dpa.
HubSpot's tracking code collects data about the visits of users to our website and their usage behaviour. The purpose of this data is to ensure the needs-based design and continuous optimisation of our website, to measure the success of marketing measures and to create statistical evaluations
When you access our website or the individual pages, the browser on your device automatically sends information to HubSpot. Among other things, the following information is stored in log files
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access was made (referrer URL),
- UTM parameters transmitted when accessing our pages,
- browser used and, if applicable, the operating system of your end device,
- Geolocalisation of your end device and
- Type of end device used.
The use of this technology enables HubSpot to assign visitors to our website to specific groups (e.g. visitors to our website who have found us via online marketing campaigns or social media) and thus recognise them. By using HubSpot's tracking code, we can also track the effectiveness of our marketing campaigns for statistical purposes and track whether and how a user has used our website after clicking on an advert.
The legal basis for the use of HubSpot's tracking code is your voluntarily granted consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
2. meta pixel
We use the so-called ‘Meta Pixel’ on our website. Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the processing of personal data of persons in the EU.
The personal data collected may be stored on servers in third countries outside the EU or the EEA.
Meta has concluded standard contractual clauses to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on Facebook's use of the Standard Contractual Clauses can be found at https://www.facebook.com/help/566994660333381?ref=dp.
Meta only transfers personal data to recipients in the USA if these recipients are certified under the EU-US data protection framework, have committed to complying with European data protection standards and thus fulfil the EU requirements for legitimising the transfer of personal data to the USA. The recipients have concluded standard contractual clauses with Meta in order to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on the voluntary commitment of Google's affiliated group companies in the USA can be found at https://www.facebook.com/privacy/policies/data_privacy_framework
The use of this technology enables Meta to assign visitors to our website to specific groups (e.g. visitors to our website or according to the areas of interest we have transmitted to Meta, so-called ‘Custom Audiences’) for the display of specific advertisements and thus to recognise them. This ensures that these users are only shown adverts that are in line with their interests, thus avoiding annoyance from inappropriate advertising. By using the meta pixel, we can also track the effectiveness of our meta adverts for statistical purposes and track whether and how a user has used our website after clicking on the advert.
For more information on the meta pixel and how it works, please visit https://www.facebook.com/business/help/651294705016616. For details on the processing of the data obtained by Facebook and general information on Facebook ads, please refer to the Meta privacy policy available at URL https://www.facebook.com/privacy/policy. You also have the option in your Facebook account under ‘Settings’ to object to the collection of your data via the Meta pixel and its use to display specific adverts. You can find information on these settings at https://www.facebook.com/settings?tab=ads (login required).
The legal basis for the use of Meta Pixel is your voluntarily granted consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
VI Payment service provider
1. paypal
This website uses PayPal as a payment service provider. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’). PayPal acts as an online payment service provider and trustee and offers buyer and seller protection services. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, your name, e-mail address, purchased products, invoice amount, invoice and delivery address will be passed on to PayPal as part of the payment process. When using the payment methods credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, PayPal may carry out a credit check to check your creditworthiness and minimise payment defaults in order to decide whether to approve the payment transaction. Probability values are used in the credit check (so-called score values), the calculation of which includes address data. The calculation of these scoring values is based on a scientifically recognised mathematical-statistical procedure. In the event of insufficient creditworthiness, PayPal may reject the selected payment method. The legal basis for processing is Art. 6 para. 1 lit. b GDPR.
If you do not agree to the transfer of data or if you are of the opinion that your creditworthiness is not suitable for the selected payment method, please use another payment method. Further information on how PayPal handles your personal data can be found in the relevant privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
2 Wix Payments
This website uses Wix Payments as a payment service provider. The provider is Wix.com Ltd, Nemal St. 40, 6350671 Tel Aviv, Israel. The controller for data subjects in the EU is Wix Online Platforms Limited, 1 Grant's Row, Dublin 2 D02HX96, Ireland (hereinafter ‘Wix.com’). Wix.com assumes the function of an online payment service provider. When paying via Wix Payments, your name, e-mail address, purchased products, date of purchase, invoice amount, billing and delivery address and information about the payment method you have chosen (e.g. credit card number, bank details or account token for payment services) may be passed on to Wix.com as part of the payment processing. Wix.com may carry out a check to prevent fraud and minimise payment defaults in order to decide whether to approve the payment transaction. In the event of insufficient creditworthiness, Wix.com may reject the selected payment method. The legal basis for processing is Art. 6 para. 1 lit. b GDPR.
If you do not agree to the transfer of data or if you are of the opinion that your creditworthiness is not suitable for the selected payment method, please use another payment method. Further information on how Wix.com handles your personal data can be found in the relevant privacy policy: https://de.wix.com/about/privacy.
VI Rating portals
1. trustpilot
This website uses the services of Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen K, Denmark (hereinafter ‘Trustpilot’).
Widgets and other media content from Trustpilot are integrated into our website to display customer reviews. When you access our website, your IP address, the date and time of access, the amount of data transferred, the requesting provider and any other data required to provide the content are automatically transferred to the provider. The legal basis for the use of widgets and other media content from Trustpilot is our legitimate interest in optimising the marketing of our offer in accordance with Art. 6 para. 1 lit. f GDPR.
If you decide to submit a review at our invitation, you must register with Trustpilot. Trustpilot's Terms of Use and Privacy Policy as well as the Trustpilot User Guidelines, which you can view at https://de.legal.trustpilot.com/index, apply to the registration and use of Trustpilot for submitting reviews. To enable you to submit the review, your name, email address and the [reference number, e.g. order number or similar] of your order for which you are invited to submit a review will be transmitted to Trustpilot. The legal basis for the transmission of this data is your consent in accordance with Art. 6 para. 1 lit. a GDPR. As our service provider, Trustpilot will send you an invitation to submit a review by email. For this purpose, your name, email address and the [reference number, e.g. order number or similar] of your order for which you are invited to submit a review will be transmitted to Trustpilot; beyond the integration of Trustpilot, we have no influence on how Trustpilot processes the data transmitted by us. Trustpilot is solely responsible for the operation of the review portal.
The personal data collected about your use of our offer or the reviews you have submitted may be stored and processed on a server in third countries outside the EU or the EEA. If no adequacy decision of the EU Commission exists for these countries, which allows the transfer of personal data in accordance with Art. 45 (1) GDPR, Trustpilot has concluded standard contractual clauses in order to fulfil the requirements of the EU to legitimise the transfer of personal data to third countries outside the EU or the EEA. Information on Trustpilot's use of the Standard Contractual Clauses can be found at https://de.legal.trustpilot.com/for-businesses/data-processing-agreement and further information on how Trustpilot handles your personal data can be found at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms
VII Google services
The provider of the following Google services is Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’).
The information and personal data collected by Google in connection with the provision of the respective service may be transferred to Google servers in the USA and stored there. The personal data collected may be stored on servers in the USA.
Google only transfers personal data to recipients in the USA if these recipients are certified under the EU-US data protection framework, have committed to complying with European data protection standards and thus fulfil the EU requirements for legitimising the transfer of personal data to the USA. The recipients have concluded standard contractual clauses with Google in order to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. You can find information on the voluntary commitment of Google-affiliated group companies in the USA at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active0000001L5AAI&status=Active&hl=en.
The personal data collected may also be processed and stored outside the EU or the EEA in third countries other than the USA. In these cases, Google has concluded standard contractual clauses in order to fulfil the EU requirements for legitimising the transfer of personal data to third countries outside the EU or the EEA. Information on the use of the standard contractual clauses by Google can be found at https://policies.google.com/privacy/frameworks?hl=de&fg=1.
Further information on how Google handles your personal data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de. Information on the use of data for advertising purposes by Google, setting and objection options can be found on these websites: https://policies.google.com/technologies/partner-sites?gl=de
https://policies.google.com/technologies/ads?gl=de
https://adssettings.google.de/anonymous?hl=de
The legal basis for the use of the following Google services is your voluntarily granted consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The legal basis for the transfer of data to the USA is your consent, also given voluntarily, in accordance with Art. 49 para. 1 lit. a GDPR. Your consent to the transfer of your data to third countries outside the EU or the EEA is subject to the conditions set out in Section II. 6.
1 Google Analytics
This website uses Google Analytics from Google without cookies. Google collects anonymised data about visits to our website by users and analyses their behaviour. This data is used to ensure that our website is designed to meet requirements and is continuously optimised, to measure the success of marketing measures and to create statistical evaluations. In this context, pseudonymised user profiles are created. Among other things, Google Analytics collects information on browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server enquiry. None of this information is read from the memory of your end device or stored on your end device. The data collected in this way about your end device is encrypted by calculating a hash value using a randomly selected character string that is appended before being entered into the hash function (known as a ‘salt’), making it virtually impossible to assign it to individual users. The information obtained in this way is stored on servers operated by Google. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google.
2. demographic characteristics with Google Analytics
Our website uses the Google Analytics function ‘demographic characteristics’. This allows reports to be created that contain statements about the age, gender and interests of our users. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. The legal basis for the use of this service is our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR to optimise and optimally market our website.
You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described above.
2 Google Analytics Remarketing
This website uses Google Analytics Remarketing from Google. Google Analytics Remarketing is used to present the visitor with adverts that relate to the content of previously visited websites. Google uses cookies to recognise visitors who access websites from the Google advertising network. This service records your IP address, which of our websites you have visited and any other data required by Google for the provision of Analytics Remarketing. The IP address transmitted by your browser will never be merged with other Google data. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. However, if you do not wish to use Google's remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads.
3 Google AdWords with conversion tracking
This website uses Google AdWords from Google and conversion tracking as part of Google AdWords. Google Conversion Tracking is used to track and analyse clicks on ads, purchases, registrations, phone calls, app downloads and other actions you take on our website. Cookies are used for analysis and evaluation. This service records your IP address, which of our websites you have visited and, if applicable, other data required by Google for the provision of conversion tracking. The IP address transmitted by your browser will never be merged with other Google data. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.