Privacy policy

Privacy Policy

We at Coralaxy take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory General Data Protection Regulation and our privacy policy.

Using this website is generally possible without providing personal data. If personal data such as name, address or email addresses are collected, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

Responsible for data collection, processing and protection on our website

Coralaxy GmbH

Diane Onkelmann

Hansestrasse 21

18182 Bentwisch

info@coralaxy.de

+ 49 (0)381-66098171

Privacy Policy

and information on any consent you may have given

As the controller within the meaning of data protection regulations, we inform you below about the processing of your personal data by us.

I. The concept of personal data and other important terms

In simple terms, personal data is all information that relates to you personally as the data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the person responsible; contact details of the data protection officer

In simple terms, the person responsible is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found above or in our imprint.

III. Purposes of processing your personal data; legal basis for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the respective legal bases stated.

1. In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analyzing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

2. In order to carry out pre-contractual measures based on a request from you, your personal data will be processed on the basis of Article 6 (1) (b) GDPR.

3. In order to safeguard our legitimate interest in answering inquiries and in carrying out other measures based on an inquiry from you, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

4. For the performance of a contract to which you are a party, your personal data will be processed on the basis of Article 6 (1) (b) GDPR.

5. For the implementation of measures for the purpose of advertising, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.

6. In order to fulfil legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 paragraph 1 letter c) GDPR.

7. In order to protect our legitimate interest in enforcing our rights and in defending claims against us, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

Our systems are secured by technical and organizational measures in accordance with the state of the art in order to protect your personal data from access, modification or distribution by unauthorized persons as well as from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding additional information in this data protection declaration.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

If this is necessary to achieve the purposes of processing your personal data, we will transmit your personal data to third parties within the framework of the legal requirements. Detailed information on the transmission of your personal data to third parties for the individual processing purposes can be found in the corresponding additional information in this data protection declaration. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.

V. Scope of processing of your personal data for the individual processing purposes

Below we will inform you in detail about the processing of your personal data for the various processing purposes.

1. Use of our website for information purposes

If you visit our website without sending us any information, we only process the personal data that your browser sends to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:

- the page you are viewing

- Date and time of the request

- amount of data transferred

- Source or reference from where you came to the page

- browser you use

- operating system you use

- Your IP address

The processing of your personal data is based on Article 6 paragraph 1 letter f) GDPR to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analyzing the use of our website.

Your personal data will be deleted after 6 months, unless they are still required to assert rights or enforce claims due to measures against the proper operation of our website. In this case, deletion will take place immediately after completion of the corresponding procedure.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that you will not be able to view our website.

2. Processing of inquiries

If you contact us with an inquiry or a request, we will process the personal data and information/documents you send us. Regardless of how you send us your inquiry or request, this may include:

- Date and time of contact

- Name data

- Contact details

- Data on inquiry/concern

- submitted information/documents

The processing of your personal data and the information/documents transmitted is carried out - depending on the content of your inquiry or request - on the basis of Article 6 Paragraph 1 Letter b) GDPR to carry out pre-contractual measures or on the basis of Article 6 Paragraph 1 Letter b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6 Paragraph 1 Letter f) GDPR to safeguard our legitimate interest in answering inquiries/concerns and in carrying out other measures in connection with the processing of inquiries/concerns.

If this is necessary to process your request/concern, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.

Your personal data will be deleted once your inquiry/concern has been clarified, but at the earliest after the expiry of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot process your request or concern.

3. Fulfillment of contracts

If you send us personal data for the purpose of concluding a contract or in connection with a contract, we will process the data you send us for the execution of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).

The processing of your personal data is based on Article 6 paragraph 1 letter b) GDPR for the performance of a contract to which you are a party.

If this is necessary for the performance of the contract with you, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission takes place to the service providers involved in the contract processing. These are the providers of the processing tools we use, the companies commissioned with the transport and the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.

Your personal data will be deleted after the tax and commercial retention periods of 6 or 10 years have expired, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

In order to conclude a contract with us, the provision of your personal data is necessary. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot conclude a contract with you.

4. Advertising via newsletter

If you sign up for our newsletter, we will process the email address you provide - and if you provide other personal data, this too - in order to send you information about our offers by email. The only mandatory information is your email address. If you voluntarily provide other personal data, we may process this data in order to address you personally in the newsletter.

If you sign up for our newsletter, you give your consent with the following content: "I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and the other personal data I have provided for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation."

Registration for our newsletter is carried out using the so-called double opt-in procedure. This means: After registration, you will first receive an email with a notification of your registration for the newsletter, together with a request to confirm your registration. Your confirmation of registration is required in order to document the required consent to send the newsletter and to be able to recognize registrations to third-party email addresses. In connection with registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with legal requirements if necessary.

The processing of your personal data is based on the consent you have given in accordance with Article 6 (1) (a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. To do so, it is sufficient to notify the person responsible, whose contact details you can find in the information on the person responsible. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

To receive our newsletter, you must at least provide your email address. You are not obliged to provide your email address. However, failure to provide your email address would mean that you cannot subscribe to our newsletter.

5. Advertising by post

We process the personal data you provide, such as your first and last name and address, if necessary to send you information about our offers by post.

The processing of your personal data is based on Article 6 paragraph 1 letter f) GDPR to protect our legitimate interest in carrying out advertising measures by post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. To do so, simply send a corresponding notification to the person responsible, whose contact details you can find in the information on the person responsible.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by post, the personal data you have provided, including your first name, last name and address, will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

You are not obliged to provide your personal data for the implementation of advertising measures by post. However, failure to provide your personal data would mean that we cannot send you advertising by post.

6. Compliance with legal obligations to which we are subject

Within the framework of the relevant specifications, we process your personal data to fulfill legal obligations to which we are subject.

In order to fulfil legal obligations to which we are subject, your personal data will be processed on the basis of Article 6 (1) (c) GDPR.

If this is necessary to fulfil legal obligations to which we are subject, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.

Your personal data will be deleted when it is no longer required to fulfill legal obligations to which we are subject, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

7. Enforcement of our rights and defense against claims against us

If necessary, we process your personal data to protect our legitimate interest in enforcing our rights and in defending against claims directed against us.

In this case, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

If this is necessary to protect our legitimate interests, we will transmit your personal data to third parties within the framework of the legal requirements. This transmission takes place to the participating providers of debt collection services or our lawyers.

In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the minimum required.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

8. Use of cookies and other technologies

We use cookies and other technologies (e.g. tags, trackers and analysis tools) on our website so that you can use the functions we offer, to be able to analyze the use of the functions we offer and, if necessary, to be able to present advertising that is as tailored to your needs as possible. Below we will inform you about the cookies and other technologies we use.

Cookies are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offer more user-friendly overall.

8.1. Technically required cookies and technologies:

The use of cookies and technologies on our website is sometimes technically necessary in order to be able to provide you with the functions of our service that you require and to document the consent you have given. For this reason, you cannot opt out of the use of the corresponding cookies and technologies. You can prevent cookies from being saved by setting your browser software accordingly. You can delete saved cookies using the appropriate settings. Please refer to the program help for the browser you are using to find out how the appropriate settings can be made. However, we would like to point out that in this case you may not be able to use all of the functions of our website to their full extent.

8.1.1. Consent tool

We use a so-called consent tool on our website with which we comply with our data protection obligations in accordance with Art. 5 Para. 2 GDPR in conjunction with Art. 6 Para. 1 Letter c ) GDPR about the cookies we use and with which we document whether and to what extent you have decided against the processing of your data.

Person responsible:

Processing purposes and legal basis:

Fulfillment of data protection obligations, to inform about cookies used and storage/documentation of consents granted in accordance with Art. 5 Para. 2 GDPR in conjunction with Art. 6 Para. 1 Letter c) GDPR

Provider of the consent tool used:

iubenda srl, Via San Raffaele, 1 – 20121 Milan (Italy)

You can find data protection information from the provider of the consent tool we use here:

https://gdpr-legal-cookie.com/pages/datenschutzerklarung

8.1.2. Technically required cookies:

Technically required cookies are cookies that are required so that you can use the functions of our service that you require (to place an order). This applies, for example, to the storage of entries in connection with the use of the shopping cart function or the storage of entries after registration in connection with the creation of a customer account.

Person responsible:

Your personal data is processed by us as the responsible party. The name and contact details of the responsible party (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our imprint. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Processing purposes and legal basis:

The processing of your personal data is carried out on the basis of Article 6 (1) (b) GDPR to carry out pre-contractual measures at your request as the data subject or on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party.

a) Customer account

You have the option of creating a customer account with us. This gives you the option, for example, of carrying out a quick check-out the next time you order or of viewing your orders. Of course, you are not obliged to create a customer account with us and can also order goods without a customer account. Accordingly, the legal basis for opening the customer account is Art. 6 Para. 1 lit a) GDPR. If you want to have a customer account you have created deleted, simply send us a corresponding message to: info@coralaxy.de .

In order to create a customer account, you must provide personal data. The mandatory information is marked with an asterisk. The only mandatory information we collect is your email address and a password of your choice. Of course, you are not obliged to provide any other personal data. However, without this information (for example your address), we cannot send you the items you have ordered. We need your address in order to forward the shipment to a shipping service provider commissioned by us, who will deliver the items you have ordered. The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

b) Collection, processing and transfer of personal data when placing orders

When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR and is necessary for the fulfilment of a contract with you.
Your data is passed on, for example, to the shipping companies, payment service providers, service providers for order processing and IT service providers you have chosen. In all cases, we strictly adhere to the legal requirements. The scope of the data transfer is kept to a minimum.
Your data will be transferred to Canada, among other places. An adequacy decision by the EU Commission has been made for data transfers to Canada.

c) Contact by email

If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you provide it. The data processing serves to process and answer your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g. advice if you are interested in purchasing, creating an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

d) Use of the email address for sending newsletters

We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

e) Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves the purpose of establishing contact.

If the contact is for the implementation of pre-contractual measures (e.g. advice in the event of a purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation. We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

f) PayPal / Check Out with PayPal

On our website we offer payment via PayPal, among other things. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also performs trustee functions and offers buyer protection services. PayPal continues to have the status of a bank in at least some countries and is therefore subject to different or expanded legislation.

If you select "PayPal" as a payment option during the ordering process in our online shop, data will be automatically transmitted to PayPal. This is data that is required to fulfill the contract, but in particular to process the payment via PayPal. By selecting this payment option, you consent to the transmission of personal data to PayPal required for payment processing. The legal basis is therefore your consent in accordance with Art. 6 Paragraph 1 Letter a) of GDPR. The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that is necessary for payment processing. Personal data that is related to the respective order, e.g. the billing address, is also necessary to process the purchase contract. If you check out in the shopping cart with PayPal, PayPal will provide us with personal data that you have stored in your PayPal account. We need this personal data so that we can send you your items. This usually includes the following information: name/first name, address, telephone number, email address. However, the exact scope depends on your PayPal account configuration.

The purpose of transmitting the data is to process payments and prevent fraud. The personal data transferred to PayPal may be transmitted by PayPal to credit agencies. This transmission is for the purpose of checking identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of PayPal. You have the option of revoking your consent to the handling of your personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. The legal basis for this processing is Art. 6 Para. 1 lit. a) and b) GDPR. Further information on the processing of your personal data by PayPal and on data protection can be found in PayPal's applicable data protection information, which you can find under the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

g) Additional payment options

In addition to PayPal, you can pay with us via advance payment, credit card (Mastercard, VISA, American Express, Amazon Pay, Apple Pay), invoice or instant bank transfer. For some payment methods, we reserve the right to carry out a prior credit check (e.g. when purchasing on account). By selecting the respective payment option, you consent to the transmission of personal data required for payment processing for your purchase in our shop. The legal basis is therefore Art. 6 Para. 1 lit. a) and b) GDPR. The personal data transmitted is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that is necessary for payment processing. Personal data that is related to the respective order is also necessary for processing the purchase contract, e.g. the billing address (for delivery of your ordered goods).

8.2. Other cookies and technologies; right to revoke consent given

In some cases, the use of cookies and technologies on our website is not technically necessary in order to provide you with the functions of our service that you require. The use of these other cookies and technologies takes place on our website only with your consent (opt-in). To enable you to make an informed decision, we will inform you below about the corresponding cookies and technologies.

You can give your consent to the use of the corresponding cookies and technologies via the consent tool we use.

You can revoke your consent at any time and without giving reasons with effect for the future. The legality of the processing carried out up to the time of revocation remains unaffected in the event of revocation.

Person responsible:

Processing purposes and legal basis:

If we use other cookies and technologies on our website, they are used to optimize the use of our website (preference cookies), to analyze the use of our website (statistical cookies) and to initiate advertising that is as needs-based as possible (marketing cookies). The processing of your personal data is based on the consent you have given in accordance with Article 6 (1) (a) GDPR.

8.2.1. Google Services

a) Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). Google Analytics uses so-called "cookies", which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. When you visit this website, you will be asked to set your privacy settings. Here you have the option of agreeing to the use of the Google Analytics service or rejecting it. Accordingly, the legal basis for this processing is Art. 6 Paragraph 1 Letter a) of GDPR. As soon as you agree to the use of Google Analytics on our website, a connection to Google's servers will be established. The following information is communicated to the Google server:

- App updates

- Click path

- Date and time of the visit

- Device information

- Downloads

- Flash version

- Location information

- IP address

- JavaScript support

- Pages visited

- Purchasing activity

- Referrer URL

- Usage data

- Widget Interactions

- Browser information

If you are logged into your Google account, you allow Google to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Google account. In addition, When using Google Analytics, this data is passed on to the following recipients:

- Google Ireland Limited

- Alphabet Inc.

- Google LLC

Google may also transfer the collected data to another country. Please note that Google may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. It may also happen that you do not even receive any information about this. According to Google, your data may be transferred to the countries listed below. This may be the case for various purposes, e.g. for storage or processing:

- United States of America

- Singapore

- Chile

- Taiwan

In addition, Google stores various cookies on your device. With the help of these cookies, Google can obtain information about visitors to our website. This information is used for marketing and analysis purposes. The cookies remain on your device for up to 2 years. Below you will find an overview of the cookies that can be associated with the use of Google Analytics:

Name: _ga

This is used to distinguish users.

Type: cookie

Storage period: 2 years

Name: _gid

This is used to distinguish users.

Type: cookie

Storage period: 1 day

Name: _gat

This is used to throttle the request rate.

Type: cookie

Storage period: 1 minute

Name: _dc_gtm_xxx

This is used to distinguish users.

Type: cookie

Storage period: 1 minute

Name: _gat_gtag_xxx

This is used to distinguish users.

Type: cookie

Storage period: 1 minute

Name: _gac_xx

This contains information about which ad was clicked.

Type: cookie

Storage period: 2 months, 29 days

Name: IDE

This ID allows Google to recognize the user across different websites and domains and display personalized advertising.

Type: cookie

Storage period: 1 year

The use of Google Analytics may trigger additional data processing operations over which we have no influence. If you want to prevent data from being passed on, you can reject the functions of Google Analytics. Regardless of this, we recommend that you regularly log out of your user account there after using a social network, but especially before activating integrated content, as this will allow you to avoid being assigned to your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying standard data protection clauses of the EU Commission. Further information on data protection and data use by Google can be found on the following Google website: https://www.google.de/intl/de/policies/privacy

b) Google Tag Manager

We use the "Google Tag Manager" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The Google Tag Manager is a tag management system. It allows the user to update measurement codes and associated code fragments, collectively referred to as "tags", on the user's website or mobile app. The Google Tag Manager tool, which implements the tags, is a cookie-less domain and does not collect any personal data itself. The Google Tag Manager triggers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with the Google Tag Manager. When you visit this website, you will be asked to set your data protection settings. Here you have the option of agreeing to or rejecting the use of the Google Tag Manager service. Accordingly, the legal basis for this processing is Art. 6 Para. 1 lit. a) GDPR. The following data is processed when using the Tag Manager:

- Aggregated data about tag firing

If you are logged into your Google account, you allow Google to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Google account. In addition, when using the Google Tag Manager, this data is passed on to the following recipients:

- Google Ireland Limited

- Alphabet Inc.

- Google LLC

Google may also transfer the collected data to another country. Please note that Google may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. It may also happen that you do not even receive any information about this. . According to Google, your data may be transferred to the countries listed below. This may be for various purposes, such as storage or processing:

- United States of America

- Singapore

- Chile

- Taiwan

If you want to prevent data from being passed on, you can reject the functions of Google Tag Manager. Regardless of this, we recommend that you regularly log out of your user account after using a social network, but especially before activating embedded content, as this will allow you to avoid being assigned to your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying standard data protection clauses of the EU Commission. Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de

c) Google Ads

We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads enables us to draw attention to our attractive offers using advertising on external websites. This enables us to determine how successful individual advertising measures are. These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. When you visit this website, you will be asked to set your data protection settings. Here you have the option of agreeing to or rejecting the use of the Google Ads service. Accordingly, the legal basis for this processing is Art. 6 Paragraph 1 Letter a) of GDPR. As soon as you agree to the use of Google Ads on our website, a connection to Google's servers will be established. The following information will be communicated to the Google server:

- Ads Viewed

- Cookie ID

- Date and time of the visit

- Device information

- Geographic location

- IP address

- Search terms

- Advertisements displayed

- Customer ID

- Impressions

- Online Identifiers

- Browser information

If you are logged into your Google account, you allow Google to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Google account. In addition, When using Google Ads, this data will be passed on to the following recipients:

- Alphabet Inc.

- Google LLC

- Google Ireland Limited

- Chile

- Singapore

- United States of America

- Taiwan

In addition, Google stores various cookies on your device. With the help of these cookies, Google can receive information about visitors to our website. This information is used for marketing and analysis purposes. The cookies remain until a year on your device. These are the cookies listed below:

Name: test_cookie

Description: This is set as a test to check if the browser allows cookies to be set. Contains no identification features.

Type: cookie

Storage period: 15 minutes

Domain: doubleclick.net

Name: IDE

Description: Contains a randomly generated user ID. This ID enables Google to recognize the user on different websites across domains and display personalized advertising.

Type: cookie

Storage period: 1 year

Domain: doubleclick.net

Using Google Ads may trigger additional data processing operations over which we have no influence. If you want to prevent data from being passed on, you can reject the functions of Google Ads. Regardless of this, we recommend that you regularly log out of your user account after using a social network, but especially before activating embedded content, as this allows you to avoid being assigned to your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying standard data protection clauses of the EU Commission. Further information on data protection and data usage by Google can be found on the following Google website: http://www.google.de/intl/de/policies/privacy

d) YouTube

On the web pages of our website we embed videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "YouTube"). Regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network. When you visit this website, you will be asked to set your data protection settings. Here you have the option of agreeing to the use of the YouTube service or rejecting it. Accordingly, the legal basis for this processing is Art. 6 Para. 1 lit. a) GDPR. As soon as you start a YouTube video on our website, a connection is established to the YouTube servers. The following information is communicated to the YouTube server:

- Device information

- IP address

- Referrer URL

- Videos viewed

If you are logged into your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. In addition, when you use YouTube, this data is passed on to the following recipients:

- Alphabet Inc.

- Google LLC

- Google Ireland Limited

YouTube may also transfer the collected data to another country. Please note that YouTube may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. It may also happen that you do not even receive any information about this. According to YouTube, your data may be transferred worldwide. This may be the case for various purposes, e.g. for storage or processing.

YouTube also stores various cookies on your device. These cookies enable YouTube to obtain information about visitors to our website. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your device for up to 10 years. After starting a YouTube video, further data processing operations may be triggered over which we have no influence.

If you want to prevent data from being passed on, you cannot use the functions of YouTube. Regardless of this, we recommend that you regularly log out of your user account after using a social network, but especially before activating embedded content, as this will prevent your data from being assigned to your profile with the respective provider. According to YouTube, any data transfer to the USA takes place in compliance with the provisions of the underlying standard contractual clauses of the EU Commission. Further information on data protection and data use by YouTube and Google can be found on the following Google website: http://www.google.de/intl/de/policies/privacy

VI. Period for which your personal data will be stored or criteria for determining this period

Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration. Information on the period for which your personal data will be stored or on the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this data protection declaration.

VII. Your rights

1. Overview

In order to ensure fair and transparent processing of personal data, you as the data subject are entitled to the following rights in accordance with data protection regulations:

the right to information pursuant to Article 15 GDPR,

the right to rectification according to Article 16 GDPR,

the right to erasure under Article 17 GDPR,

the right to restriction of processing pursuant to Article 18 GDPR,

the right to data portability according to Article 20 GDPR

the right to revoke consent given at any time in accordance with Art. 7 Para. 3 GDPR,

the right to object to processing pursuant to Article 21 GDPR, about which we will inform you separately below

and the right to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR, about which we will inform you separately below.

2. Your right to object to processing

The processing of personal data is permitted if the processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data prevail, in particular if the data subject is a child, Art. 6 Para. 1 Letter f) GDPR.

You as the data subject have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms as a data subject, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data in order to conduct direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you as the data subject object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your right to lodge a complaint with the supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data concerning you violates the provisions of the GDPR.

VIII. Information on the basis for the provision of your personal data and possible consequences of non-provision

To the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal data and on possible consequences of non-provision in the information on the processing of your personal data for each processing purpose.

last updated: 17.01.2024

Let us surprise you!

Privacy policy

Privacy Policy

Cart

You may also like...

Let us surprise you!

Privacy policy

Privacy Policy

SUBSCRIBE TO OUR NEWSLETTER