Data protection declaration (GDPR compatible)

Data protection declaration

1. Information about the collection of personal data and contact details of the person responsible
2. Data acquisition when visiting our website
3. Cookies
4. Data processing for order processing
5. Data processing when opening a customer account and contract processing
6. Contact
7. Comment function
8. Use of your data for direct mail
9. Contact to the evaluation reminder
10. Use of social media: video
11. Online marketing
12. Web analysis services
13. Retargeting / remarketing / recommendation advertising
14. Use of a live chat system
15. Use of evaluation and test seal graphics
16. Tools and other
17. Rights of the person concerned
18. Duration of the storage of personal data

1. Information about the collection of personal data and contact details of the person responsible

1.1. Thank you for visiting our website. Below we would like to inform you about dealing with your personal data when using our website. Personal data is basically all data with which you can be personally identified.

1.2. The person responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

Corinna Glanert
Schönbüchstr. 24
77887 Sasbachwalden
Germany
Tel.:07841-8392410
Email: info@spiritbalance.net.

1.3. The person responsible has appointed the following data protection officer:

Ra Dr Sebastian Kraska
Marienplatz 2
80331 Munich
Tel: 089-8918917360
Email: email@iitr.de

1.4. In order to protect the safety of your data during the transfer, we use the current state of the technology corresponding encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data acquisition when visiting our website

Every time our website is accessed, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data required for us are collected:

Our visited website
Date and time at the time of access
Quantity of the data sent in byte
Source/reference from which they came to the page
Operating system used
Browser used
Used IP address (possibly: in anonymous form

The legal basis for processing is Art. 6 Para. 1 Lit. f GDPR based on our legitimate interest in improving the stability and maintenance of the functionality of our website. There is no transfer or other use of the data. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.
We reserve the right to check the server log files retrospectively, should indicate specific indications of illegal use. The data will be deleted as soon as they are no longer necessary to achieve the purpose of their survey. In the event of recording the data for providing the website, this is the case if the respective session has ended.
In the event of storing the data in log files, this is the case after seven days at the latest. In addition, it is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The data for providing the website and storing the data in log files is imperative for the operation of the website. As a result, there is no possibility of contradiction on the part of the user.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's end device. If a user calls a website, a cookie can be saved on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a change of sides. The user data collected by technically necessary cookies are not used to create user profiles. In the above purposes, our legitimate interest is also in the processing of personal data according to Art. 6 Para. 1 lit. f) GDPR.

In addition, our website uses cookies that enable an analysis of the surfing behavior of the users (so -called Third Party Cookies). You can find more information on the scope, purpose, legal basis and options for contradiction in the respective sections of the respective chapter of this data protection declaration.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, all functions of the website may not be used fully. You can prevent the transmission of flash cookies by changing the setting of the flash player.

Help with the settings can be found in the respective help of your browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted again after closing their browser (so-called session cookies). Other cookies stay on your device and enable us or our partner companies (Third Party Cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual scope. Persistent cookies are automatically deleted after a given duration, which can differ depending on the cookie.

4. Data processing for order processing

4.1. If you would like to order in our web shop, it is necessary for the contract to provide your personal data that we need to process your order. We process the data you provide to process your order.

Sometimes we work with external service providers to handle your order. For this we have to pass on the necessary personal data.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. To handle the payments, we pass on your data to the commissioned credit institution within the scope of the necessity. If we use payment service providers, you will also be informed below.
The legal basis for the transfer of your data is Art. 6 Para. 1 lit. b GDPR.

4.2. External service providers for ordering and order processing

- Sendcloud

The shipping takes place via "Sendcloud" (Sendcloud GmbH, Kanalstr. 10, 80538 Munich). We therefore pass on your personal data in accordance with Art. 6 Para. 1 Lit. B GDPR exclusively for the purpose of processing your order and only as part of the necessity to Sendcloud. Details on data protection at Sendcloud can be found on the Sendcloud website at www.sendcloud.de/datenschutz/ see.

4.3. Delivering your personal data to shipping service providers

- DHL

If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we give for the purpose of delivery and as part of the necessity in accordance with Art. 6 Para. 1 lit. b GDPR only the name of the recipient and the delivery address to DHL. Only if you have given your express consent in the ordering process, we will pass on your email address in accordance with Art. 6 Para. 1 Lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery to DHL. Your consent can be revoked at any time with effect for the future towards the person described above or to the transport service provider DHL.

4.4. Use of payment service providers

- stripe
When selecting a payment method of the payment service provider Stripe, payment processing is carried out via the Stripe Payments Europe LTD, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as "Stripe").
We provide your personal data along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of payment processing and only in the frame of the required to stripe.

- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing via the technical service provider Stripe Payments Europe Ltd. , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we are your information given as part of the order process, along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) pass on according to Art. 6 Para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the Stripe Payments Europe Ltd. And only insofar as it is necessary. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy
Data protection information on Stripe Payments Europe Ltd. Find here: https://stripe.com/de/privacy

4.5. Google Pay
When selecting the payment method "Google Pay" (a service of the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), the payment processing is conveyed via the "Google Pay" application Of your Android (at least 4.4 "kitkat") operated and an NFC function of mobile devices. When payment is made via one of your payment cards stored on Google Pay or a payment system verified there (e.g. PayPal). To release a payment via Google Pay of more than EUR 25, you first have to unlock your mobile end device. Your information provided for the order will be passed on to Google for the purpose of payment processing. Google generates a one -off transaction number that is transmitted to the order website in order to verify the payment. This transaction number is just a numerical token that does not contain any information about your data. The actual transaction is carried out between the user and the order website by loading the means of payment stored on Google Pay. Personal data can be processed in the processes described. In this case, the processing is carried out for the purpose of the payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Further information, in particular information on the handling of Google with your data, can be found here:
Terms of use of Google Pay https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Data protection on Google: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=pri Vacynotice & ldl = de

4.6. Apple Pay
When selecting the payment method "Apple Pay" (a service of the Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment processing is carried out via the "Apple Pay" function of your with iOS, Watchos or MacOS End device by loading a payment card stored by you at "Apple Pay".

Your transaction is protected using the safety functions of the hardware and software of your device. If a payment is to be released, it must be released by entering a code and verification using the "Face ID" or "Touch ID"- function of your device.

Your information given during the ordering process, along with the information about your order, will be passed on to Apple for the purpose of payment processing in encrypted form. Apple then encrypted this data and then transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website can access the payment data on which the order was also made.

After payment, Apple will send the device account number and a transaction-specific, dynamic security code to the shop website to confirm the payment.
Personal data can be processed in the processes mentioned. In this case, this happens for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

When using Apple Pay on the iPhone or Apple Watch to complete a purchase that was made via Safari on the Mac, communicating the Mac and the authorization device via an encrypted channel on the Apple server. Apple can process or save data. However, this happens in a format with which your person cannot be identified.

Information on the data protection of Apple Pay can be called up here: https://support.apple.com/de-de/HT203027

5. Data processing when opening a customer account and contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 Para. 1 Lit. B GDPR. The scope of the data can be seen from the input form. The data you have entered will be saved and used by us for contract processing.
You can delete your customer account at any time. This can be done directly in the customer account by a message to the address of the person responsible or, if offered. In this case, we will also block your data with regard to tax and commercial law storage periods and delete them after these deadlines. Only your consent to permanent storage or a legally permitted further data usage from our website can be opposed.

6. Contact

If you contact us using the contact form, the data entered in the input mask will be transmitted and saved. The data collected can be found in the respective input mask. When contacting us by email, only the data you have entered will be transferred to us.
The data is used exclusively for the processing of the conversation and its concern. The legal basis for the processing of the data is Art. 6 Para. 1 lit. a) GDPR if the user consent. The legal basis for the processing of the data that is sent in the course of sending an email is Art. 6 Para. 1 lit. f) GDPR. If email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b) GDPR. The data will be deleted as soon as you are no longer necessary to achieve the purpose of your collection and if there are no legal retention obligations. This is the case for the personal data from the input mask of the contact form and those sent by email if the respective conversation has ended with the user. The conversation has ended when it can be seen from the circumstances that the affected fact is finally clarified. The user has the option at any time to revoke his consent to the processing of personal data. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

7. Comment function

If you use the comment function of our website, in addition to your commentary, information will also be saved at the time the commentary is created and the commentary name you chose and published on the website. Your IP address is also logged and saved.
The legal basis for the storage of your data is Art. 6 Para. 1 lit.B and F GDPR. The IP address is stored for security reasons and in the event that the data subject violates the rights of third parties or published illegal content by a comment. Your email address will be needed to get in touch with you if a third party should object to its published content as illegal. We reserve the right to delete comments if they are objected to by third parties as illegal.

7.1. If you subscribe to follow-up comments, you will first receive a confirmation email (double opt-in procedure) in which you have to confirm to be the owner of the specified email address. The legal basis for data processing in the event of subscription to comments is Art. 6 Para. 1 lit. a GDPR. A comment subscription can be terminated at any time with effect for the future in accordance with the information in the confirmation email.

8. Use of your data for direct mail

8.1. Newsletter

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask will be transmitted to us. The mandatory information is only your email address. If you make further voluntary inputs, they are only used for personal addressing.

The legal basis for the processing of your data after registration for the newsletter is available if the user consent is Art. 6 Para. 1 lit. a GDPR. We collect this by receiving a confirmation email after registering for the newsletter in which a confirmation link is located. If you click on this link, you will at the same time give consent to the newsletter preservation.
When sending the registration for the newsletter, we save your IP address as well as the date and time of registration. This storage serves to be able to understand a possible abuse of your email address.

We only use the data collected by us when registering for the newsletter for the purpose of the newsletter shipping.

The subscription to the newsletter can be canceled at any time. For this purpose there is a corresponding link in every newsletter. This also enables a revocation of the consent of the storage of the personal data collected during the registration process.

8.2. Newsletter for existing customers

If you were purchasing on our website or services and deposit your email address, this can subsequently be used by us to send a newsletter. In such a case, the newsletter only sends direct mail for your own similar goods or services.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Paragraph 3 UWG and Art. 6 Para. 1 lit. f GDPR. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct marketing.

If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you also have the possibility of contradiction to the use of your email address for the purpose mentioned here. Advertising purpose at any time with effect for the future by notification to the one mentioned at the beginning after receipt of their objection, the use of your email address for advertising purposes will then be discontinued immediately.

8.3. Newsletter shipping via click tip

We send our newsletters via the click tip Limited, 15 Cambridge Court 210 Shepherd’s Bush Road London W6 7NJ united kingdom (hereinafter referred to as "click tip").
We pass on the data you have entered in accordance with Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interest in the use of an advertising -effective, safe and user -friendly newsletter system to click tip.
The data entered when ordering the newsletter (e.g. email address) are stored on the click tip servers in the United Kingdom. Your data will be used from click tip for shipping and statistical evaluation of the newsletters on our behalf. For this purpose there are so-called web biacons or trackings pixels in the newsletter emails, the one-pixel image files stored on our website. In this way, it can be understood whether a newsletter email opened and which links have been clicked from it. With the help of this conversion tracking you can also understand whether an action (such as buying an item from our shop) was made after opening a link from the newsletter. Technical information is also recorded (e.g. the time of access, your IP address, browser type and/or operating system). This data is collected exclusively pseudonymized and not linked to your other personal data. If you do not want the data analysis described here, you must unsubscribe from the newsletter. There is an order processing contract with click tip.

Details on the data protection of click tip can be found at:
https://www.klick-tipp.com/datenschutzerkl%C3%A4rung

8.4. Newsletter shipping via Klaviyo

We also send our newsletters via Klaviyo, Inc. 125 Summer St, Floor 6 Boston, MA 02111 United States (hereinafter referred to as "Klaviyo").

We pass on the data you have entered in accordance with Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interest in the use of an advertising -effective, safe and user -friendly newsletter system to Klaviyo.

The data entered when ordering the newsletter (e.g. email address) are stored on the clavy's servers in the United States. Your data will be used by Klaviyo to send and statistical evaluation of the newsletters on our behalf. For this purpose there are so-called web biacons or trackings pixels in the newsletter emails, the one-pixel image files stored on our website. In this way, it can be understood whether a newsletter email opened and which links have been clicked from it. With the help of this conversion tracking you can also understand whether an action (such as buying an item from our shop) was made after opening a link from the newsletter. Technical information is also recorded (e.g. the time of access, your IP address, browser type and/or operating system). This data is collected exclusively pseudonymized and not linked to your other personal data. If you do not want the data analysis described here, you must unsubscribe from the newsletter. With claviyo there is an order processing contract.

Details on the data protection from Klaviyo can be found at:

https://www.klaviyo.com/legal/privacy-notice

9. Contact to the evaluation reminder

Review by Trustpilot

Due to your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR, we transmit your email address to the Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (Denmark (www.trustpilot.com)). You will receive an evaluation reminder from Trustpilot by email. You can revoke your consent at any time by a message to the person responsible for processing your data or to the Trustpilot.

10. Use of social media: video

Use of YouTube videos

On this website we use the YouTube dating function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Here we use the extended data protection mode, which according to the provider information only starts storage of user information when the video is reproduced. When you start playback of embedded YouTube videos, the provider "YouTube" uses cookies to collect information about your user behavior. According to "YouTube", these serve, among other things, to record video statistics, to improve user -friendliness and to prevent abusive actions. If you are logged in on Google, your data will be assigned to your account directly.

If you do not want the assignment with your profile on YouTube, you must log out before activating the button. Google stores your data (even for non -logged -in users) as usage profiles and evaluates them. Such an evaluation takes place in particular in accordance with Art. 6 Para. 1 Lit.F GDPR on the basis of Google's legitimate interests on the inclusion of personalized advertising, market research and/or needs -based design of a website, as well as our legitimate interest in the integration of the videos in accordance .

You have a right to object to the formation of these user profiles, whereby you have to contact YouTube to exercise it. Regardless of playback of the embedded videos, a connection to the Google Network "DoubleClick" is made every time this website is accessed, which can trigger further data processing processes without our influence.

It can also be transmitted to the Google LLC server. come in the USA. In the event of the transmission of personal data to the Google LLC based in the USA, Google LLC has certified "Privacy Shield" for the US-European data protection agreement, which guarantees compliance with the data protection level applicable in the EU. Further information on data protection at "YouTube" can be found in the data protection declaration of the provider at: https://www.google.de/intl/de/policies/privacy

Opt-out possible at:
https://adssettings.google.com/authenticated.

11. Online marketing

Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and as part of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

With the help of advertising materials (so -called Google AdWords), advertising on external websites is promoted for our offers. Our legitimate interest lies in the display of advertising, which is interesting for you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 Para. 1 lit. f GDPR.

Google Ads uses cookies for conversion tracking that are set when you click on an AdWords display connected by Google.

These cookies usually lose their validity after 30 days and do not serve personal identification. Every Google Ads customer receives a different cookie, so cookies cannot be tracked through the websites of ADS customers.

The information obtained in this way serves to create conversion statistics for ADS customers about the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking day.

They cannot be identified personally.

If you want to prevent tracking, you can deactivate the Google Conversion tracking cookie using your internet browser under user settings.

In the event of data transfer to Google LLC based in the USA, Google LLC is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

Here you will receive information about Google's data protection regulations: http://www.google.de/policies/privacy/

You can deactivate the conversion cookies permanently by a corresponding setting of your browser or download and install the browser plug-in available under the following link:
http://www.google.com/settings/ads/plugin?hl=de

In this case, certain functions of this website may not be used or only used to a limited extent.

12. Web analysis services

12.1. Google Universal Analytics

We use the Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website.
Google Analytics uses cookies ". These are text files that are stored on your computer and that enable an analysis of the use of the website.
The information created in this way about your use of this website (including the shortened IP address) is transferred to a Google server and stored there, whereby transmission to the USA is possible.

We use Google Analytics with the extension "_anonymizeiP ()", which ensures anonymization of the IP address by reducing and excludes a direct personal reference. Your IP address is therefore shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server, also to the USA, and only shortened there. In these exceptional cases, this processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google uses this information to evaluate your website usage, to create reports via website activities and to provide us with other services associated with website activity and internet usage. There is no merging of your IP address collected in this context with other data from Google.

You can prevent the storage of the cookies by setting your browser.
You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plugin:
http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:

Deactivate Google Analytics

This opt-out cookie only works in this browser and only for this domain. Delete your cookies in this browser, you must click on this link again.

In the event of data transfer to Google LLC based in the USA, Google LLC is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

This website also uses Google Analytics for a cross-device analysis of visitor flows that is carried out via a user ID. In your customer account, you can deactivate the interdisciplinary analysis of your use under "My data", "Personal data".

Google data protection declaration:
https://support.google.com/analytics/answer/6004245?hl=de

12.2. Shopify Analytics

We use the web analysis service from Shopify (Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).

To maintain our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, by Shopify, pseudonymized visitor data is collected, evaluated and stored, from which pseudonymized usage profiles can be created and evaluated. Shopify uses cookies to recognize the browser and thus enable a more precise determination of the statistics data. Your IP address will also be collected, but immediately after the collection is pseudonymized before storage, so that a personal reference is excluded.

The legal basis is Art. 6 Para. 1 lit. f GDPR.

Shopify does not connect your IP address to other Shopify data.

In order to contradict the data collection and creation of pseudonymized user profiles and the setting of cookies for the future, you can generally deactivate the use of cookies on your computer by stopping your internet browser so that no more cookies can be stored on your computer in the future already stored cookies are deleted. However, switching off all cookies can lead to some functions on our website can no longer be fully used.

The data protection guidelines from Shopify can also be found at:
https://www.shopify.de/legal/datenschutz

13. Retargeting / remarketing / recommendation advertising

Facebook Custom Audience using the pixel process

On this website we use the "Facebook pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If there is an explicit consent, the behavior of users can be followed by this after this can be traced after this have seen or clicked a Facebook advertisement. This procedure serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimize future advertising measures. The data collected is anonymous for us, so we cannot draw any conclusions about the identity of the users. However, data is saved and processed by Facebook, so that a connection to the respective user profile is possible and Facebook the data for your own advertising purposes, according to the Facebook data usage guideline (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to switch advertisements on and outside of Facebook. For these purposes, a cookie can be saved on your end device. These processing processes are carried out exclusively when the express consent is issued in accordance with Art. 6 Para. 1 lit. a GDPR. Consent in the use of the Facebook pixel may only be explained by users who are older than 13 years old. If you are younger, we ask you to ask your legal guardians for permission. Facebook Inc. based in the USA is certified for the US European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. You can deactivate the use of cookies on your computer by corresponding browser setting. However, this can lead to some functions on our website can no longer be used completely. You can also deactivate the use of cookies by third -party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

14. Use of a live chat system

Zendesk (formerly Zopim)
On this website we use the Zendesc Inc., 1019 Market St, San Francisco, USA (USA (USAwww.zendesk.com).
Anonymous data for the purpose of web analysis and the operating of the live chat system are collected and stored for answering live support requests. Usage profiles can be created from this anonymized data from a pseudonym. Cookies can also be used for this purpose. These cookies enable the internet browser to recognize. If the information collected in this way has a personal reference, the legal basis for the processing is Art. 6 Para. 1 lit. f GDPR.

Our legitimate interest lies in the effective customer care and the statistical analysis of user behavior for optimization purposes. The data is not used without the consent of the person concerned to personally identify the visitor to this website. No data is merged with personal data about the carrier of the pseudonym.

You can avoid storing the cookies by adjusting your internet browser so that in the future no cookies can no longer be stored on your computer or that have already been deleted. However, this can lead to some functions on our website can no longer be carried out. You have the option of contradicting the data collection and storage for the purpose of creating a pseudonymized usage profile at any time with effect for the future. Send us your contradiction informally by email to our email address mentioned at the beginning of the data protection declaration.

Zendesk Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.

15. Use of evaluation and test seal graphics

Trusted Shops Trustbadge

On our website, we bind to the display of the Trusted Shop Gütesiegel (Trusted Shops GmbH, Subelrather Str. 15c, 50823 Cologne) and the ratings collected, as well as the Trusted Shops Trustbadge. Our legitimate interest lies in the optimal marketing of our offer. The legal basis is Art. 6 Para. 1 lit. f GDPR.
When calling up the Trustbadge, the web server automatically stores a server log file, which, for example, contains your IP address, date and time of access, transmitted amount of data and the requesting provider and documented the access. We do not evaluate these access data and automatically overwritten at the latest seven days after the end of your page visit.

16. Tools and other

16.1. Google Recaptcha

We use the recaptcha function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") in accordance with Art. 6 Para. 1 Lit. f GDPR based on our legitimate interest in avoiding abuse and spam .
Recaptcha is a function that should make sure that an input is made by a natural person.
The service sends your IP address and, if necessary, other data required by Google for the Recaptcha service to Google.

When using the Google Recaptcha, it can also be transmitted to the Google LLC server. come in the USA.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. The certificate can be called up on the following website: https://www.privacyshield.gov/list.

Details of Google Recaptcha and the data protection declaration from Google can be viewed at:
https://www.google.com/intl/de/policies/privacy/

16.2. Google Maps
We use "Google Maps" (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps serves to present interactive maps and the creation of travel descriptions. By using Google Maps, information about the use of this website including your IP address and the (start) address entered as part of the route planner function can be transferred to Google. If you call up a website of our website that contains Google Maps, your browser establishes a direct connection with Google's servers. Google transmits the card content directly to your browser and integrated from it into the website. Therefore, we have no influence on the scope of the data collected in this way. According to our level of knowledge, these are at least the following data:
• Date and time of the visit on the relevant website,
• Internet address or URL of the accessed website,
• IP address, entered (start) address entered as part of the route planning.

We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility. If you are logged in at Google, your data will be assigned to your Google account directly. If you do not want this assignment, you have to log out of Google. Google stores your data (also the non -logged -in users) as usage profiles and evaluates them. Such an evaluation takes place in particular in accordance with Art. 6 Para. 1 Lit.F GDPR on the basis of Google's legitimate interests in the inclusion of personalized advertising, market research and/or needs -based design of its website. You have a right to object to the formation of these user profiles, whereby you have to assert it on Google.
If you do not want Google to collect, process or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights and setting options for protecting your privacy can be found in the data protection information from Google (https://policies.google.com/privacy?hl=de). For the event that data transfer to the USA occurs, Google LLC, based in the USA, is certified for the US European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

Google's terms of use can be called up here:
http://www.google.de/intl/de/policies/terms/regional.html
The terms of use for Google Maps can be called up here:
https://www.google.com/intl/de_US/help/terms_maps.html
Further information on data protection can be found here:
http://www.google.de/intl/de/policies/privacy/

17. Rights of the person concerned

17.1. The applicable data protection law grants you comprehensive data subjects (information and intervention rights) about the processing of your personal data, which we inform you about below:

- Right of information in accordance with Art. 15 GDPR:
You can request confirmation from the person responsible for whether personal data that concerns you are processed by the person responsible. In addition, you have the right to information about the purpose of the categories of personal data, the recipient, the planned duration of storage and the existence of further rights such as correction of the data or the existence of a complaint law in a supervisory authority, the origin of your data if These have not been collected by us, the existence of automated decision -making including profiling and, if applicable Pass your data to third countries;

- Right to correction according to Art. 16 GDPR:
You have the right to immediately correct the incorrect data and/or the completion of your incomplete data stored by us; The correction or completion must be made immediately.

- Right to restrict the processing in accordance with Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data, as long as the correctness of your data you have contained is checked if you reject your data due to inadmissible data processing and instead request the processing of your data if you request your data need to assert, exercise or defend legal claims after we no longer need this data after the purpose or if you have filed a contradiction for reasons of your special situation, as long as it is not yet clear whether our legitimate reasons outweigh;
If the processing of the personal data relating to it has been restricted, this data - apart from your storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of a different natural or legal person or for reasons of an important public interest the Union or a Member State. If the restriction of processing was restricted, the person responsible is informed before the restriction is canceled.

- Right to deletion according to Art. 17 GDPR:
You have the right to be fulfilled the immediate deletion of your personal data such as the requirements of Art. 17 Para. 1 GDPR. However, this right to deletion, in particular, does not - not in conclusion - are not necessary if the processing of the right to exercise the right to freedom of expression and information, to fulfill a legal obligation, is necessary for reasons of public interest or to assert, exercise or defend legal claims;

- Right to information in accordance with Art. 19 GDPR:
If you have exercised your right to correction, deletion or restriction of processing, the person responsible is obliged to notify all recipients to whom your personal data has been disclosed or deleted the data or deletion of processing if this is not impossible or with a disproportionate Effort is connected. You also have the right to be informed about these recipients.

- Right to data portability in accordance with Art. 20 GDPR:
You have the right to obtain your personal data given to us in a structured, common and machine -reading format or to request the transmission to another person responsible, insofar as this is technically possible;

- Right to revocation according to Art. 7 Para. 3 GDPR:
You have the right to object at any time to the processing of the personal data relating to you based on Art. 6 Para. 1 lit. e) or f) GDPR; This also applies to a profiling based on these provisions.
You also have the right to revoke your data protection declaration at any time with effect for the future. The revocation of the consent does not affect the legality of the processing due to the revocation due to the consent.

- Right to complaint according to Art. 77 GDPR:
Without prejudice to any other administrative or judicial legal remedy the GDPR violates.

17.2. Right of contradictions

You have the right to contradict the processing of your data at any time with effect for the future if we process your data after a balancing of interests due to our predominantly justified interest.
If you make use of this right to object, we will end your data if not demonstrably predominantly compelling legitimate grounds are opposed to the termination or if the further processing of the exercise or defense of legal claims serves.

18. Duration of the storage of personal data

The duration of the storage of personal data depends on statutory retention periods. After the expiry, we routinely delete the data if you are no longer necessary to fulfill or initiate and/or/or for us no legitimate interest in the further storage.

Data protection declaration (GDPR compatible)

Register for our newsletter