Privacy policy

Below, we provide information regarding our processing of your personal data. Personal data within the meaning of Art. 4 of the GDPR is any information relating to an identified or identifiable natural person (such as name, address, telephone number, email address, invoices, bank details, etc., as well as your user behavior).

Contents

1. Contact details  

2. Lawfulness of personal data processing

3. Collection and storage of personal data and the nature and purpose of its use

4. Storage duration and data deletion

5. Disclosure of data to third parties

6. Hosting

7. Cookies

8. Payment service providers

9. Creditworthiness checks

10. Analytics services

11. Social media services

12. Other online services

13. Rights of data subjects

14. Right to object

15. Data security

16. Currency and amendment of this privacy policy

1. Contact details

This privacy information applies to data processing by the following controller:

Controller: Global Extend GmbH

Address: Autenbachstr. 18, 73035 Göppingen

Email: info@globalextend.de

Telephone: 07161 9830987

2. Lawfulness of the processing of personal data

As a general rule, we collect and use our users' personal data only to the extent necessary to provide a functional website and to deliver our content and services. The collection and use of our users' personal data generally take place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons or where the processing of the data is permitted by statutory provisions.

Pursuant to Article 6 of the General Data Protection Regulation (GDPR), the processing of personal data is lawful if one or more of the following conditions are met:

- you have given your express consent to the processing pursuant to Art. 6(1)(a) GDPR,

- the processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract, pursuant to Art. 6(1)(b) GDPR,

- we are subject to a legal obligation requiring the processing pursuant to Art. 6(1)(c) GDPR,

- the processing is necessary to protect your vital interests or those of another natural person, pursuant to Art. 6(1)(d) GDPR,

- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, pursuant to Art. 6(1)(e) GDPR,

- the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, pursuant to Art. 6(1)(f) GDPR, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data.

3. Collection and storage of personal data and the nature and purpose of its use

When you use our website, we may process personal data—such as contact details, usage data, and communication data—relating to our website users (who may include customers, prospective customers, and general visitors).

We do this for purposes including providing a functional online service, communicating with users, handling contact or customer inquiries, and fulfilling contracts. Furthermore, cookies are placed when you visit our website (see the "Cookies" section of this privacy policy). We may also use third-party online services to collect and process data for purposes such as marketing, subject to your consent. You will find further details regarding this in this privacy policy.

Below, we explain which of your data may be collected and processed, and for what purposes.

Visiting the website

When you access our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information may be collected without any action on your part and—unless otherwise specified—stored until automatic deletion after a maximum of 30 days:

- IP address of the requesting computer

- Date and time of access

- Content of the request (specific page)

- Name and URL of the retrieved file

- Access status/HTTP status code

- Volume of data transmitted

- Website from which access originated (referrer URL)

- Browser used and, if applicable, your computer's operating system and the name of your access provider

- Language and version of the browser software

Where collected, the aforementioned data is processed by us for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring a user-friendly experience on our website,

- Evaluating system security and stability, and

- For other administrative purposes.

The legal basis for data processing is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

In addition, we may use cookies and online services when you visit our website. Further details can be found in this privacy policy.

Initiation and Performance of Contracts

We process personal data received in the context of pre-contractual inquiries, our business relationship, and the processing of revocations. For example, the following personal data may be collected and processed by us: form of address, first name and surname, address, telephone number, e-mail address, and contract and order data (such as order number, subject matter and term of the contract, and payment details).

Furthermore, data may be disclosed to third parties (see Section 5, "Disclosure of Data to Third Parties," in this privacy policy).

The processing and storage of your transmitted data are based on Art. 6(1)(b) GDPR for the purpose of fulfilling a contract or taking steps prior to entering into a contract. In other cases, we process and store your data based on your consent pursuant to Art. 6(1)(a) GDPR and our legitimate interest in processing inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

Unless statutory retention periods prevent it, the data collected and stored regarding you will be deleted as soon as the purpose of storage no longer applies and storage is no longer required (e.g., your request has been processed or the business relationship has ended).

Signing up for our newsletter

You have the option to subscribe to our newsletter. To do so, we require your email address and—optionally—your name so that we can address you personally in the newsletter.

We use the so-called "double opt-in" procedure. This means that after signing up, you will receive an email from us asking you to confirm your subscription. By clicking the activation link contained in the email, you confirm that you are the owner of the email address and wish to receive the newsletter. Provided you have given your express consent, we use your email address—based on that consent pursuant to Art. 6(1)(a) of the GDPR—to send you our newsletter at regular intervals with information about our offers.

If you do not confirm the activation link within three weeks, we will delete the email address registered for the newsletter.

The data collected is used solely for sending the newsletter and documenting your consent. When you sign up for the newsletter, we store your IP address and the date of registration. This storage serves exclusively as proof in the event that a third party misuses an email address and signs up for the newsletter without the authorized owner's knowledge.

We work with a dispatch service provider to send our newsletters. Data is generally transmitted directly to the service provider's servers—potentially located in the USA—and stored there. The service provider uses this data to send the newsletters and to perform statistical analysis on our behalf.

To measure performance, our newsletters contain so-called "web beacons" (small, invisible graphics) used to collect information. These are pixel-sized files that are retrieved from the service provider's servers when the emails are opened. For example, this allows us to see whether the email has been opened. Technical data—such as IP address, browser type, or the time of access—is also recorded. This data is analyzed solely to assess the reading habits of our newsletter recipients, enabling us to tailor content to their interests. It is not possible to opt out of performance tracking separately; if you do not wish for performance tracking to take place, please unsubscribe from the newsletter entirely.

We use a service provider to send the newsletter and conduct performance tracking based on your consent (pursuant to Art. 6(1)(a) GDPR) and our legitimate interest in maintaining an efficient, user-friendly, and secure newsletter system (pursuant to Art. 6(1)(f) GDPR). A data processing agreement has been concluded in accordance with Art. 28(3) GDPR.

You may unsubscribe from the newsletter and withdraw your consent at any time; this will result in the deletion of the data stored for newsletter delivery and mean that you will no longer receive the newsletter from us. You can withdraw your consent by clicking the unsubscribe link provided in every newsletter email or by sending a message to the contact details listed in the legal notice (Impressum).

Email Service Provider:

Klaviyo

Our newsletters are sent via the email service provider Klaviyo, 225 Franklin St., Boston, Massachusetts 02110, USA. Klaviyo, United Kingdom (49 Southwark Bridge Rd, London SE1 9HH, UK), is responsible for operations in the European region.

Klaviyo is certified under the EU-U.S. Data Privacy Framework.

You can view Klaviyo’s privacy policy here:

https://www.klaviyo.com/privacy/policy

When using our contact form

For inquiries of any kind, we offer you the option to contact us via a form provided on the website. Providing a first and last name as well as a valid email address is required so that we know the source of the inquiry and can respond to it. You may also voluntarily provide a telephone number.

The processing and storage of your transmitted data are based on Art. 6(1)(b) GDPR for the purpose of handling your inquiry. Furthermore, we process your data based on your consent pursuant to Art. 6(1)(a) GDPR and our legitimate interest in processing inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

Unless statutory retention periods prevent this, the data collected and stored will be deleted as soon as the purpose for storage no longer applies and storage is no longer necessary (e.g., once the matter submitted via the contact form has been resolved).

Creating a Customer Account

You have the option to register with us and create a customer account. The data required for this (such as name, address, and email) is clearly marked and indicated in the input form. Your personal data is stored in the customer account so that you do not have to re-enter it during future visits to our website or when placing further orders, thereby simplifying the ordering process. Access to the customer account is protected by a password of your choice.

You may delete your customer account and revoke your consent at any time; this will result in the irrevocable deletion of the data stored in the account, provided there are no statutory retention obligations preventing this. To do so, simply send a message to the contact details provided in the legal notice (email is also acceptable).

The processing and storage of the data you provide are based on Art. 6(1)(a) GDPR (pursuant to your prior consent) and Art. 6(1)(b) GDPR (for the performance of the contract).

4. Storage Duration and Data Deletion

As a general rule, we store personal data only until the purpose for which you entrusted the data to us has been fulfilled. Thereafter, the data is permanently deleted. However, if statutory retention periods apply to the storage of personal data, we store the data for the duration of the legally required period. Such obligations typically arise from legal requirements regarding documentation and record-keeping—regulated, for instance, in the German Commercial Code (HGB) and the Fiscal Code (AO)—such as a ten-year retention period for tax purposes. Upon expiration of the statutory retention period, the data is permanently deleted.

Consent given for the processing and storage of your personal data pursuant to Art. 6(1)(a) GDPR may be revoked at any time; the consequence of such revocation is that the data will be permanently deleted, provided there are no conflicting statutory retention periods.

Additional rights enabling you to prohibit us from processing your personal data arise from Art. 21(1) and (2) GDPR.

Information regarding the resulting right to object can be found in this privacy policy under the section “Right to Object.”

5. Disclosure of data to third parties

We only disclose your personal data to third parties if:

- you have given your express consent to do so pursuant to Art. 6(1) sentence 1(a) GDPR,

- disclosure is necessary pursuant to Art. 6(1) sentence 1(f) GDPR to safeguard our legitimate interests or those of a third party—such as for the exercise, defense, or assertion of legal claims—provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not override such interests,

- there is a legal obligation to disclose the data pursuant to Art. 6(1) sentence 1(c) GDPR,

- disclosure is made pursuant to Art. 6(1) sentence 1(b) GDPR to the payment service provider commissioned with processing payments for the purpose of payment processing, and pursuant to Art. 6(1) sentence 1(f) GDPR within the scope of our legitimate interests in offering reliable and secure payment processes, and

- this is legally permissible and necessary pursuant to Art. 6(1) sentence 1(b) GDPR for the performance of contractual relationships with you, such as passing on address details to a transport company. Data may also be passed on to a dropshipper who then ships the goods to you on our behalf. If you order goods to be shipped to an address other than your own, this is done on the basis of our legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR in the proper execution of the contractual relationship. Where necessary, a data processing agreement pursuant to Art. 28(3), sentence 1 of the GDPR has been concluded with the service provider engaged.

In the event that the customer's personal data is processed in a third country (outside the EU), this takes place based on the customer's prior consent, for the performance of the contract, or due to statutory obligations. Any such transfer is carried out in compliance with legal requirements; specifically, the provisions of Articles 44 to 49 of the GDPR apply.

Transfers are generally based on an adequacy decision by the EU Commission. In the case of a third country for which no adequacy decision exists, data transfers are based—among other mechanisms—on Standard Contractual Clauses (available at the link below) as appropriate safeguards for the protection of personal data:

https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de

On July 10, 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework—or "DPF" for short (the successor to the "Privacy Shield"). The DPF now serves as the basis for data transfers to certified organizations in the USA without the need for further transfer mechanisms or additional measures. Relevant notices are included in this privacy policy whenever an organization is certified under the DPF.

6. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the host's servers, potentially in the USA. This may include, in particular, IP addresses, contact inquiries, communication data, contract data, contact details, website access data, and other data generated via the website.

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data. A data processing agreement pursuant to Art. 28 (3) sentence 1 of the GDPR has been concluded with the host.

We use the host for the purpose of fulfilling contracts with our potential and existing customers pursuant to Art. 6 (1) (b) GDPR and in the interest of providing our online services securely, quickly, and effectively pursuant to Art. 6 (1) sentence 1 (f) GDPR.

Host:

TimmeHosting

We host our website with the following service provider: TimmeHosting, Ovelgönner Weg 43, 21335 Lüneburg, Germany.

You can find further information regarding TimmeHosting's data protection policies at:

https://timmehosting.de/datenschutz

7. Cookies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific device used.

To use the website, absolutely necessary cookies are used, which ensure that the website functions smoothly and do not require consent. The use of these cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies. This creates a session ID that assigns the session to the user and is temporarily saved. This means that several windows on our website can be opened and assigned to the same user, meaning that log-in data or the contents of the shopping cart are retained. When you close the browser, session cookies are deleted.

We can also use functional cookies. These cookies store the settings made when you last visited the website, such as language selection or internal bookmarks, so that they do not have to be selected again. This can make future visits to our website more pleasant.

Furthermore, so-called performance cookies can be used. These contain information about how our website is used. For example, we can see how often and for how long our website is visited and which sub-pages are visited. This allows us to see which areas of our website are particularly interesting for the user. Performance cookies enable the analysis of your surfing behavior for the purpose of optimizing our online offering. It is not possible to draw conclusions about you as a user.

Third-party marketing cookies may be placed on your device. The purpose of online marketing is to analyze user behavior across multiple websites over a longer period of time in order to place appropriately personalized advertising.

You can configure your browser settings according to your wishes and refuse to accept cookies. We would like to point out that you may then not be able to use all of the functions of this website.

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Cookies are used either based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR or within the scope of our legitimate interests in a functional website in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR.

8. Payment Service Providers

Personal data is processed by a payment service provider based on Article 6(1)(b) of the GDPR for the purpose of contract fulfillment and only to the extent necessary for this purpose, as well as based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR in order to offer you reliable and secure payment processes. The respective payment provider is responsible for ensuring that the data collected and processed by them is handled in compliance with data protection regulations. You may revoke your consent to the data processing vis-à-vis the respective payment service provider at any time.

PayPal

When paying via a payment method provided by PayPal (direct debit, credit card, installment payment, or purchase on invoice), payment processing is handled by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

If you choose a PayPal payment method, you will be redirected to the PayPal website. To provide this service, PayPal collects, processes, and stores transaction data, such as login/contact details, identification/signature data, payment information, the amount paid, technical usage data, and location data. For the aforementioned payment methods, PayPal reserves the right to conduct a credit check within the limits of applicable law. For this purpose, your payment data may be transmitted to credit reference agencies pursuant to Article 6(1)(f) of the GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. For further information regarding data protection, please refer to PayPal’s privacy policy:

https://www.paypal.com/myaccount/privacy/privacyhub

Apple Pay

If you choose the "Apple Pay" payment method provided by Apple Distribution International Ltd. (Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland), you require an Apple Pay-enabled device with Apple Pay set up, as well as a supported payment card from a bank that partners with Apple.

Data collected during payment processing is transmitted to Apple. Apple Pay encrypts this data using a developer-specific key before the transaction details are sent to the developer or payment processor. This key ensures that only the app or website used for the purchase can access the encrypted payment data. Apple transmits the device account number, along with a transaction-specific dynamic security code, to the app or website. The actual payment card number is never transmitted.

To provide this service, Apple collects, processes, and stores transaction data in an anonymized form—such as the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Apple uses this data to improve Apple Pay and other products and services.

To provide this service, Apple collects, processes, and stores transaction data, such as the amount paid, technical usage data, and location data.

Further information can be found on Apple's website:

https://www.apple.com/de/apple-pay/

Apple's privacy policies are available at:

https://www.apple.com/de/legal/privacy/de-ww/

Further information regarding security and privacy with Apple Pay is available at:

https://support.apple.com/de-de/HT203027

Credit Card

When paying by credit card, we collect and process the personal data required to handle the payment—such as your name, credit card number, card expiry date, and security code—and forward this information to your credit card issuer for billing purposes.

Direct Debit

If you choose the direct debit payment option, you grant us a SEPA direct debit mandate. The direct debit mandate must contain the following details:

- Name of the payee,

- Creditor Identifier (CI),

- Name of the customer (payer),

- Name of the customer’s (payer’s) bank, and

- Customer identifier (payer’s IBAN).

Based on the authorization you have granted, we instruct our bank to collect the invoice amount from your account. Our bank notifies your bank of the debit, which in turn initiates the corresponding credit entry.

9. Creditworthiness Information

In the case of the "invoice" payment method (where this is not processed via a payment service provider), we may—upon the conclusion of a contract and pursuant to Art. 6(1)(f) GDPR—retrieve creditworthiness information from specialized financial service providers (credit agencies) to mitigate the risk of payment default. For this purpose, we transmit your personal data, such as your full name, address, and date of birth, to the credit agency. This interest is considered legitimate within the meaning of the aforementioned provision.

The processing of data stored by the respective credit agency is carried out for compelling reasons related to creditor and credit protection—which generally outweigh your interests, rights, and freedoms—or serves the establishment, exercise, or defense of legal claims.

10. Analytics Services

The tracking measures listed below that we employ are carried out based on your consent pursuant to Art. 6(1)(a) of the GDPR. We use these tracking measures to ensure our website is designed to meet needs and is continuously optimized. Furthermore, we use these tracking measures to statistically record website usage and analyze the data in order to optimize our services for you. Where necessary, a data processing agreement pursuant to Art. 28(3) of the GDPR has been concluded with the service provider in question.

You can prevent the storage of cookies by adjusting your browser software settings accordingly. However, please note that doing so may mean you are unable to make full use of all the functions of this website. Unless otherwise specified regarding the storage period, the data will be stored for a period of two years and subsequently deleted.

You can find general information on usage-based online advertising at the following link:

https://www.youronlinechoices.com/de/

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC, on our website. The responsible entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use Google’s "Consent Mode" in its basic implementation. Unless you have provided your consent pursuant to Art. 6(1)(a) GDPR, the loading of Google tags is blocked, and no data is sent to Google (including consent status).

If you have provided your consent, Google tags are loaded for analysis and marketing purposes to track user behavior on our website. This analysis tool uses artificial intelligence to algorithmically evaluate cookies, scripts, and pixels, thereby measuring specific usage behavior. This process may involve the processing and storage of data such as: time spent and pages visited on our website, the browser used, the date and time of the page view, language settings, and actions such as scrolling to the bottom of the page or clicking on external links. On behalf of the website operator, Google will use this information to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage to the website operator. Stored data is deleted after a maximum of 14 months.

Based on location data derived from and transmitted via IP addresses, all data from devices located within the EU is collected via domains and servers within the EU. However, data may also be transmitted in encrypted form to Analytics processing servers in the USA. According to Google, IP addresses collected from users in the EU are deleted before being recorded via EU domains and servers. IP anonymization takes place automatically; according to Google, the IP addresses are neither logged nor stored. Google is certified under the EU-U.S. Data Privacy Framework. Legal frameworks regarding data transfers by Google, as well as the European Commission’s Standard Contractual Clauses, are available at:

https://policies.google.com/privacy/frameworks

Further information regarding Google’s privacy policy and terms of use is available at: https://policies.google.com/privacy

You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

You can adjust your settings regarding personalized advertising by Google at any time. https://www.google.com/settings/ads/onweb

Use of Google Inc.’s Remarketing or “Similar Audiences” feature

We use “Google Analytics Remarketing” features. The company responsible for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

This feature allows us to present targeted, personalized, and interest-based advertisements to users based on their browsing behavior on our website when they visit other websites belonging to the Google advertising network. To achieve this, Google stores “cookies” in the user’s browser (see Section 7, “Cookies”). Information generated by these cookies regarding the use of this website is transmitted directly to Google servers—potentially located in the USA—and stored there. Google is certified under the EU-U.S. Data Privacy Framework. Cookies enable the recognition of the user when they visit websites belonging to the Google advertising network. These cookies do not serve to identify a specific person, but solely to identify the web browser.

In doing so, we utilize the cross-device feature. This involves linking the advertising audiences created via Google Analytics Remarketing with the cross-device capabilities of Google Ads and DoubleClick. If a user has provided their consent, Google links their web and browser history with their Google account for this purpose. This allows relevant advertisements to be displayed on the user’s other devices, such as smartphones and tablets. The maximum lifespan of the cookie is 18 months. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

If you do not wish to receive advertisements, you can disable them here: https://www.google.com/settings/ads/onweb

Further information regarding Google’s privacy policy and terms of use is available at: https://policies.google.com/privacy

You can find more information on the legal framework for data transfers at: https://policies.google.com/privacy/frameworks?hl=de

Google Ads Conversion Tracking

Our website uses the "Google Ads" advertising system provided by Google LLC. The entity responsible for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use conversion tracking as part of Google Ads. In this process, Google Ads places a so-called "cookie" (see Section 7, "Cookies") on your computer if you arrived at our website via a Google ad. The information generated by the cookies regarding your use of this website is transmitted directly to Google servers—potentially located in the USA—and stored there. Google is certified under the EU-U.S. Data Privacy Framework. These cookies expire after 30 days and are not used for personal identification. If you visit specific pages on our site while the cookie is still valid, both Google and we can recognize that you clicked on the ad and were redirected to that page.

Each Ads customer receives a unique cookie. Consequently, cookies cannot be tracked across the websites of different Ads customers. The information collected via the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive information that would allow for the personal identification of users.

Furthermore, you can prevent Google from collecting data generated by the cookie and related to your use of the website (including your IP address), as well as prevent Google from processing this data, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

If you do not wish to receive such advertisements, you can disable them here: https://www.google.com/settings/ads/onweb

Further information regarding Google’s privacy policy and terms of use is available at: https://policies.google.com/privacy

Further information regarding the legal framework for You can find information on data transfers at: https://policies.google.com/privacy/frameworks?hl=de Meta or Facebook Pixel, Custom Audiences, and Facebook Conversion.

We use the so-called Meta or Facebook Pixel on our websites—an analytics tool provided by the social network Facebook and operated by Meta Platforms Inc. (1 Meta Way, Menlo Park, CA 94025, USA) or, if you are based in the EU, by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland).

The Meta or Facebook Pixel tracks user behavior on our website using so-called "events." A pixel event is a piece of additional information that supplements the data sent to Meta. Events allow Meta to identify which actions (e.g., purchase, registration, lead, search, etc.) were performed on our site. The pixel is deployed on our site in standard mode (using first-party cookies).

Furthermore, we can see whether customers were redirected to our site from a Facebook advertisement and whether they completed specific actions (so-called "conversions"), such as purchasing a particular product. This allows us to evaluate the effectiveness of our advertisements for statistical purposes based on these conversions.

Third parties, including Meta, may use cookies, web beacons, and other storage technologies to collect or receive information from the website and elsewhere on the internet, and subsequently use this information to provide measurement services, ad targeting, and ad delivery. Details regarding how the Meta Pixel (or Facebook Pixel) works can be found in the Facebook Help Center at:

https://www.facebook.com/business/help/651294705016616

To the extent stipulated in Meta’s terms, we are joint controllers with Meta Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland) regarding the data transmitted via the Meta Pixel: https://de-de.facebook.com/legal/terms/businesstools.

We have entered into a joint controllership agreement with Meta Ireland pursuant to Art. 26 of the GDPR: https://www.facebook.com/legal/controller_addendum.

Subject to prior consent, we may transmit customer information to Meta as part of the "Custom Audiences" feature; based on the information received, Meta can then assign visitors of our online services to a specific target group and display tailored advertisements ("Ads") to them. This ensures that advertisements—including those displayed across multiple devices—are shown only to users who have demonstrated an interest in our products. Furthermore, we can track whether customers were redirected to our site from a Facebook advertisement and whether they performed specific actions (so-called "conversions"), such as purchasing a particular product. This allows us to evaluate the effectiveness of our advertisements for statistical purposes based on these conversions.

As part of the Advanced Matching process, the user's personal data is collected and transmitted to Meta servers, potentially located in the USA. Meta is certified under the EU-U.S. Data Privacy Framework.

Where stipulated by Meta's terms, Meta Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland) acts as the data processor.

Meta may link the data to the user's Facebook account if the user is registered with Facebook. Even without a Facebook registration, it is possible for Meta to process and store data (including your IP address).

Meta retains information for as long as necessary to provide products, fulfill legal obligations, or protect its own interests or the interests of others. Meta stores event data for a maximum of two years.

You may object to data collection via the Meta Pixel and the use of your data for displaying Facebook ads. You can also manage your ad preferences—specifically, the types of ads displayed to you on Facebook—at: https://www.facebook.com/settings?tab=ads

Further information regarding Meta's Data Policy is available at:

https://www.facebook.com/about/privacy/

We use the services of Klar (Klar Insights GmbH, Clemensstr. 2, 80803 Munich, Germany) on our website. On our behalf, Klar collects, processes, and stores data on this website and its subpages for the purpose of reach measurement and statistical analysis. This data collection is based on the following legal basis: If the user has provided consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, the data to be processed is collected on a user-specific basis. Different cookies are used for the aforementioned types of data collection to facilitate the respective method. Cookie Opt-Out: To object to the use of Klar entirely, please use this link. This sets a cookie named "do_not_track" from the domain "pascal.sh". Please do not delete this cookie, as doing so would prevent us from ensuring that you are not tracked by Klar. Information regarding data protection and data usage by Klar can be found on the following website: https://www.getklar.com/data-protection

11. Social Media Services

We use social media plugins on our website based on our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR in order to increase awareness of our website.

When you access a page on our website that contains a social media plugin, a connection to the selected network is established. In the process, a so-called "cookie" (see the "Cookies" section of this privacy policy) is placed on your computer. Information generated by the cookies regarding your use of this website—such as your IP address, device data, and location data—is transmitted directly to the provider's servers (potentially located in the USA) and stored there. Through this integration, the provider receives information indicating that your browser has accessed the corresponding page of our website, even if you do not have a customer profile or are not currently logged in to the respective provider's service. The provider may use the information obtained for advertising, market research, and the needs-based design of its pages.

If you are logged in to a provider's service, that provider can directly associate your visit to our website with your user account. If you interact with the plugins—for example, by clicking a button—this information is also transmitted directly to a server of the respective provider and stored there. Furthermore, the information is published on your user account and displayed to your contacts. The respective provider may use this information for advertising, market research, and the needs-based design of its pages.

If you do not wish for the provider to directly associate the data collected via our website with your user account, you must log out of the respective provider's service before visiting our website.

Please note that, as the website operator, we have no knowledge of the content of the transmitted data or how it is used by the respective provider.

You may object to the processing by the provider at any time.

Social Networks:

Facebook

We use social media plugins from the social network Facebook, operated by Meta Platforms Inc., 1 Meta Way, Menlo Park, CA 94025, USA ("Facebook") or—if you are based in the EU—Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Meta is certified under the EU-U.S. Data Privacy Framework.

Further information regarding Facebook's privacy policy can be found at:

https://www.facebook.com/about/privacy/

Instagram

We use social media plugins from the social network Instagram. Instagram services are a product of Meta Platforms Inc., 1 Meta Road, Menlo Park, CA 94025, USA. If you are based in the EU, the data controller is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Meta is certified under the EU-U.S. Data Privacy Framework.

Further information regarding Instagram's privacy policy can be found at:

https://help.instagram.com/155833707900388

12. Other Online Services

On our websites, we utilize online services and advertising tools provided by the companies listed below, either based on your consent pursuant to Art. 6(1)(a) GDPR or based on our legitimate interest in the optimal marketing of our services pursuant to Art. 6(1)(f) GDPR. Where necessary, a data processing agreement pursuant to Art. 28(3) GDPR has been concluded with the respective service provider.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that doing so may mean you are unable to make full use of all the functions of this website.

YouTube

We embed online content (typically videos) from the "YouTube" platform. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are based in the EU, the data controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The operator of the sites is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

We have activated YouTube's "extended data protection mode," which blocks the setting of YouTube cookies. When you visit a page of ours that contains an embedded YouTube video, no connection to YouTube's servers is established initially. Data is only transmitted to Google if you have provided your consent in accordance with Art. 6(1)(a) GDPR. This process may also establish a connection to the Google "DoubleClick" network, an advertising tool provided by Google. In this context, Google may store cookies on your device, specifically the cookies YSC (session-based identification for generating video statistics), VISITOR_INFO1_LIVE (storage of user preferences, valid for up to 6 months), VISITOR_PRIVACY_METADATA (storage of session and privacy settings), and __Secure-ROLLOUT_TOKEN (unique identifier for the statistical analysis of video views, valid for up to 180 days).

Data (including your IP address) is transmitted directly to Google servers—potentially located in the USA—and stored there. In doing so, Google may store cookies (see Section 7, "Cookies") on your device to analyze your user behavior and associate this data with your user account if you are logged into a Google service. Google may also process the data received even if you do not have a customer profile or are not currently logged in. If you do not wish for Google or YouTube to associate the data collected via our website with your user account, you must log out of Google services before visiting our pages.

Google or YouTube may use this information for purposes such as compiling video statistics and improving user-friendliness. Please note that we have no knowledge of the content of the transmitted data or how it is used by Google or YouTube. You may object to this processing by the provider at any time. You can change your privacy settings on YouTube at any time via your Google account. Assistance is available at: https://support.google.com/youtube/answer/9315727?hl=de

Google LLC is certified under the EU-U.S. Data Privacy Framework.

Google stores collected data for varying periods, depending on the type of data, how Google uses it, and the user's settings. Advertising data in server logs is anonymized by Google deleting a portion of the IP address after 9 months and cookie information after 18 months.

You can find further information regarding Google's data protection practices at:

https://policies.google.com/privacy

https://policies.google.com/technologies/retention?hl=en

We use social media plugins from the social network WhatsApp. WhatsApp services are provided by WhatsApp LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. If you are based in the EU, the data controller is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp is part of the Meta Platforms, Inc. corporate group (1601 Willow Road, Menlo Park, CA 94025, USA).

WhatsApp stores data for up to 90 days, depending on the purpose.

WhatsApp LLC is certified under the EU-U.S. Data Privacy Framework.

You can find more information about WhatsApp's privacy policy at:

https://www.whatsapp.com/legal/privacy-policy

"Certified Webshop" Seal

The "Certified Webshop" seal is displayed on our website. The seal and the associated services are provided by Tisko Consulting GmbH, Hertzstr. 15, 53881 Euskirchen. When the seal is accessed, the web server automatically stores a so-called server log file—documenting the access—which contains, for example, your IP address, the date and time of the request, the volume of data transferred, and the requesting provider (access data). This access data is not analyzed and is automatically deleted no later than 30 days after the end of your visit to the site.

Further information regarding data protection at Tisko Consulting GmbH is available at:

https://www.gepruefter-webshop.de/datenschutz/

Online Chat

Customers have the option to contact us via the online chat feature offered on our website. This chat can take place either via a chatbot—a virtual communication robot—or through direct communication with a support representative.

Using the online chat enables us to handle customer inquiries quickly and in a service-oriented manner. The legal basis for using the online chat is Art. 6(1)(a) of the GDPR. Using the online chat or chatbot may result in cookies being placed on the user's device—for example, to recognize whether a user has already viewed or closed a message. When a chatbot is used, personal data (such as IP address, location data, or access data) may be transmitted to the chatbot provider. The provider may use this data to display targeted advertising. The content of the conversation with the user is stored for a maximum of two years. Users have the option to permanently and completely delete the conversation at any time.

Provider:

Userlike

We use a chatbot provided by Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany.

Further information regarding Userlike's General Terms and Conditions can be found at:

https://www.userlike.com/de/terms#privacy-policy

13. Rights of the Data Subject

You have the right:

- to request information about your personal data processed by us, in accordance with Art. 15 GDPR. In particular, you may request information regarding the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of the right to request rectification, erasure, restriction of processing, or to object to processing, the right to lodge a complaint, the source of your data (if not collected by us), and the existence of automated decision-making, including profiling, and—where applicable—meaningful information about the details thereof;

- to request the immediate rectification of incorrect personal data or the completion of personal data concerning you that is stored by us, in accordance with Art. 16 GDPR;

- to request the erasure of personal data concerning you that is stored by us, in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

- to request the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, if we no longer need the data but you require them for the establishment, exercise, or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR; - pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller;

- pursuant to Art. 7(3) GDPR, to withdraw your previously given consent at any time. As a result, we may no longer continue the data processing based on that consent for the future; and

- pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. Generally, you may contact the supervisory authority of your habitual residence, your place of work, or our registered office for this purpose.

14. Right to Object

If your personal data is processed based on our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21(1) GDPR on grounds relating to your particular situation. In such a case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

You may also object pursuant to Art. 21(2) GDPR to the processing of your personal data by us for the purpose of direct marketing pursuant to Art. 6(1)(f) GDPR; in this case, we will no longer process your personal data for the purpose of direct marketing. If you wish to exercise your right of withdrawal or right to object, simply send an email to the address listed in the legal notice.

15. Data Security

When you visit our website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. Typically, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether a specific page of our website is being transmitted in encrypted form by the closed key or padlock symbol displayed in the bottom status bar of your browser.

Furthermore, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

16. Currency and Amendment of this Privacy Policy

This privacy policy is currently in effect.

It may become necessary to amend this privacy policy due to the further development of our website and the services offered via it, or as a result of changes in legal or regulatory requirements. You may access and print the current version of this privacy policy on this website at any time.

This privacy policy was prepared by the contract lawyers of TISKO Consulting GmbH (www.Gepruefter-Webshop.de) and is protected by copyright. Any use beyond the scope of the contractual agreement, as well as the copying or unauthorized use of the texts, is prohibited and constitutes a copyright infringement subject to legal action.