Back to Top
Data protection declaration DIS-CONNECT GmbH
1. Information about the collection of personal data and contact details of the person responsible
(1) We are pleased that you are visiting our website or using our app and thank you for your interest. In the following we will inform you about how your personal data is handled when you use our service. Personal data is all data with which you can be personally identified, e.g. name, address, email addresses, user behavior.
(2) The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DIS-CONNECT GmbH, Gerwigstr. 29, 76131 Karlsruhe, email: info@dis-connect.de, represented by the managing director Georg Dis. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
(3) This website uses SSL encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
4) Web hosting IONOS
We host our websites at IONOS, provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur (hereinafter IONOS), and at CONTABO, provider is Contabo GmbH, Aschauer Straße 32a, 81549 Munich (hereinafter CONTABO) and at Hetzner, provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
For details, please see the privacy policy of IONOS: https://www.ionos.de/terms-gtc/terms-privacy and of CONTABO: https://www.contabo.com/de/legal/privacy and of Hetzner: https://www.hetzner.com/de/legal/privacy-policy/
The use of IONOS, CONTABO and Hetzner is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Order processing
We have concluded contracts for order processing (AVV) with the above-mentioned providers. These are contracts required by data protection law that ensure that our contractual partners only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
2. Data collection when visiting our website
If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- - The website we visited
- - Date and time of access
- - Time zone difference to Greenwich Mean Time (GMT)
- - Access status/http status code
- - Amount of data sent in bytes
- - Source/reference from which you accessed the site
- - Browser used, its language and version
- - Operating system used and its interface
- - IP address used (if applicable: in anonymized form)
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
3. Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.
Some of the cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either to execute the contract or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
4. Contact
When you contact us (e.g. via app, contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been finally processed; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.
5. Data processing when opening a customer account and for contract processing
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above-mentioned address of the person responsible. We save and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to use the data further as permitted by law, about which we will inform you accordingly below.
6. Data processing for processing the purchase or sale of mobile devices
(1) The personal data we collect will be passed on to the transport company commissioned with the shipping as part of the contract processing, insofar as this is necessary for the shipping of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.
(2) Transfer of personal data to shipping service providers
DHL Paket GmbH
If the goods are delivered by the transport service provider DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn (hereinafter also DHL), we will pass on your email address to DHL in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DHL.
United Parcel Service Deutschland S.à.r.l. & Co. OHG
If the goods are delivered by the transport service provider United Parcel Service Deutschland S.à.r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss (hereinafter also UPS), we will pass on your email address to UPS in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider UPS.
(3) Use of payment service providers (payment services)
Payment services
We integrate payment services from third-party companies on our website. If you make a sale or purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contract and data protection provisions of the respective providers apply to these transactions. The use of payment service providers is based on Art. 6 Para. 1 lit. b GDPR (contract processing) and in the interest of a payment process that is as smooth, convenient and secure as possible (Art. 6 Para. 1 lit. f GDPR). If your consent is requested for certain actions, Art. 6 Para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment services / payment service providers on this website:
PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
Details can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Apple Pay
The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple's privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/.
SumUp
The provider is SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland D02 K580. You can find SumUp's privacy policy at: https://sumup.de/datenschutzbestimmungen/
Google Pay
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google's privacy policy here: https://policies.google.com/privacy.
Stripe
The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter "Stripe").
The data transfer to the USA is based on the EU Commission's standard contractual clauses. You can find details here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.
You can find details about this in Stripe's privacy policy at the following link: https://stripe.com/de/privacy.
Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). Klarna offers various payment options (e.g. installment purchase). If you decide to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
You can find details about this in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.
Instant bank transfer
The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH"). Using the "Instant bank transfer" process, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to meet our obligations. If you have chosen the "Instant bank transfer" payment method, you send the PIN and a valid TAN to Sofort GmbH, which they can use to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and makes the transfer to us using the TAN you have sent. They then immediately send us a transaction confirmation. After logging in, your transactions, the credit limit of the overdraft facility and the existence of other accounts and their balances are also automatically checked. In addition to the PIN and TAN, the payment details you have entered and your personal data are also sent to Sofort GmbH. The personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary in order to establish your identity beyond doubt and to prevent attempted fraud. Details on payment with Sofortüberweisung can be found at the following links:
https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
Amazon Pay
The provider of this payment service is Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg. You can find details on how your data is handled in Amazon Pay's privacy policy at the following link: https://pay.amazon.de/help/201212490?ld=APDELPADirect.
Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter "Mastercard"). Mastercard can transfer data to its parent company in the USA. Data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.
VISA
The provider of this payment service is Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, Great Britain (hereinafter "VISA"). Great Britain is considered a third country with secure data protection laws. This means that Great Britain has a level of data protection that corresponds to the level of data protection in the European Union.
VISA can transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.
For more information, see VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
7. Web analysis services
Google Analytics
We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures that the IP address is anonymized by shortening it and excludes direct personal reference. Due to the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Google Analytics
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information about how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics E-Commerce Measurement
This website uses the "E-Commerce Measurement" function of Google Analytics. With the help of E-Commerce Measurement, the website operator can analyze the purchasing behavior of website visitors in order to improve their online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. Google can summarize this data under a transaction ID that is assigned to the respective user or their device.
Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked and how often, and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who clicked on our ads and what actions they performed. We do not receive any information with which we can personally identify the user. Google itself uses cookies or similar recognition technologies for identification.
The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. Consent can be revoked at any time.
You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that we can use to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out independent analyses. It is only used to manage and display the tools integrated through it. However, Google Tag Manager records your IP address, which can also be transferred to Google's parent company in the United States.
Google Tag Manager is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing will be carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
8. Existence of automated decision-making
We do not use any automated decision-making processes.
9. Rights of the data subject
(1) The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:
- - Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is forwarded to third countries;
- - Right to rectification in accordance with Art. 16 GDPR: You have the right to have inaccurate data concerning you rectified immediately and/or to have incomplete data stored by us completed;
- - Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- - Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request restriction of processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request restriction of processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;
- - Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you was disclosed of said rectification or erasure of the data or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed of these recipients.
- - Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party, insofar as this is technically feasible;
- - Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation;
- - Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
(2) RIGHT OF OBJECTION IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
IF YOU WOULD LIKE TO EXERCISE YOUR RIGHT TO OBJECT, JUST SEND AN E-MAIL TO INFO@DIS-CONNECT.DE.
10. Duration of storage of personal data
The duration of storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After the period has expired, the corresponding data is routinely deleted unless it is no longer required to fulfill or initiate a contract or we have no legitimate interest in continuing to store it.
11. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. Providing an email address is sufficient to receive our newsletter. The additional voluntary information about you is only used to personalize the newsletter.
We use the so-called double opt-in procedure to send the newsletter, which means that after you register, we will send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email.
At the end of each newsletter there is a link that you can use to unsubscribe from the newsletter at any time. You can also unsubscribe from the newsletter at any time by sending an email to mailto:info@dis-connect.de.
We use newsletter service providers to process the newsletter, which are described below.
Sendinblue
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Sendinblue is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Sendinblue's servers in Germany.
Data analysis by Sendinblue
With the help of Sendinblue, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. In this way, we can determine, among other things, which links have been clicked particularly often.
We can also see whether certain previously defined actions were carried out after opening/clicking (conversion rate). This allows us to see, for example, whether you made a purchase after clicking on the newsletter.
Sendinblue also enables us to divide the newsletter recipients into different categories ("cluster"). The newsletter recipients can be divided by age, gender or place of residence, for example. In this way, the newsletters can be better tailored to the respective target groups.
If you do not want Sendinblue to analyze them, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose.
You can find detailed information about the functions of Sendinblue at the following link:
https://de.sendinblue.com/newsletter-software/.
Legal basis
The data processing is carried out on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Storage period
The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that we have stored for other purposes will remain unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). Storage in the blacklist is not time-limited. You can object to storage if your interests outweigh our legitimate interest.
For more information, see Sendinblue's privacy policy at:
https://de.sendinblue.com/datenschutz-uebersicht/.
Order processing
We have concluded an order processing contract (AVV) with the provider named above. This is a contract required by data protection law that guarantees that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
12.Our social media presences
Data processing by social networks
We maintain publicly accessible profiles on social networks. The social networks we use in detail can be found below.
Social networks such as Facebook, Instagram, etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or were logged in.
Please also note that we cannot track all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the most comprehensive possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media presences (e.g. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered during this visit. You can generally assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite our joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely based on the company policy of the respective provider.
Storage period
The data we collect directly via the social media presence is deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the data collected is also transferred to the USA and other third countries.
We have concluded a joint processing agreement with Meta (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For further details, see Facebook's privacy policy:
https://www.facebook.com/about/privacy/.
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.
14. Status and changes to our privacy policy
This is our currently valid privacy policy. It is dated September 2022.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website under Data Protection [link].
