Privacy Policy

Privacy Policy Happyware Server Europe GmbH

1. Preliminary note

Thank you for visiting our website and for your interest in our company. We understand data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.

With this data protection declaration, we would like to inform all visitors to our website transparently about the type, scope and purpose of the personal data we collect, use and process and inform you about the rights to which you are entitled.

In principle, it is possible to use our website without providing personal data. However, if you make use of our company's services via our website, the processing of your personal data may become necessary.

The data automatically collected when visiting our website or personal data entered by you when using our services will be processed in accordance with the current legal provisions on the protection of personal data.

If processing of your personal data is necessary and there is no legal basis for such processing, we generally obtain your consent for the required purpose of the processing.

As the company responsible for processing, we have established technical and organizational measures to ensure the highest possible level of protection for your personal data. However, we would like to point out that data transmission via the World Wide Web can have security gaps. If you would like to use the services of our company and do not want to use the way of data transmission via the World Wide Web, there is also the possibility of contacting us by telephone.

The following information provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

The controller has integrated components from Novalnet AG on this website. Novalnet AG is a full payment service provider which, among other things, handles payment processing. If the data subject selects a payment method during the ordering process in the online store, data of the data subject are automatically transmitted to Novalnet AG. By selecting a payment option, the data subject consents to this transmission of personal data for the purpose of processing the payment. The personal data transmitted to Novalnet are usually first name, last name, address, date of birth, gender, email address, IP address, telephone number, cell phone number and other data necessary for the processing of a payment. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order. In particular, there may be a mutual exchange of payment information, such as bank details, card number, validity date and CVC code, data on goods and services, prices. The purpose of the data transfer is, in particular, identity verification, payment administration and fraud prevention. The controller will transmit personal data to Novalnet AG in particular if there is a legitimate interest for the transmission. The personal data exchanged between Novalnet AG and the controller will, if necessary, be transmitted by Novalnet AG to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness.

Novalnet AG also discloses personal data to service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data.

The data subject has the option to revoke the consent to the handling of personal data at any time vis-à-vis Novalnet AG. A revocation does not affect personal data that must necessarily be processed, used or transmitted for (contractual) payment processing.

2. Responsible body/data protection officer of the company

Responsible person in the sense of the basic data protection regulation, is:

Company: Happyware Server Europe GmbH
Street: Brauerstraße 44
ZIP/City: 21244 Buchholz i.d. Nordheide
Tel.: +49 4181 235770
E-mail: [email protected]

The following person has been appointed as data protection officer:

Mr. Stephan Hartinger
Coseco GmbH
Phone: 08232 80988-70
E-mail: [email protected]

3. Data collection on this website

We use your personal data only for the purposes stated on this information page on data protection. The following input masks for the collection of personal data exist on our website:

3.1. Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies do not cause any damage to the user's terminal device.

We use cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. We also use cookies on our website for the purpose of analyzing the surfing behavior of our site visitors. Furthermore, we use cookies for the purpose of subsequently addressing site visitors on other websites with targeted, interest-related advertising. The processing is carried out on the basis of § 15 (3) TMG as well as Art. 6 (1) lit. f DSGVO from the legitimate interest in the above-mentioned purposes.

The data collected from you in this way is pseudonymized by technical precautions. An assignment of the data to your person is therefore no longer possible. The data will not be stored together with other personal data from you.

You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f DSGVO for reasons arising from your particular situation. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

You can find out how to manage (including disabling) cookies on the main browsers by following the links below:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac.

3.2. Server Log File Data/Server Log Files

Each time you visit our website, server log file information that your browser transmits to us is automatically collected. These are:

IP address (Internet Protocol address) of the accessing computer.

the website from which you visit us (hereinafter referred to as referrer)
the website you visit with us
the date and duration of the visit
Browser type and settings
Operating system

We would like to point out that this data cannot be assigned to a specific person. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. Our company has a legitimate interest in the technically error-free and secure presentation as well as the optimization of our website - for this purpose, the server log files must be collected. Therefore, we use this technical access information exclusively for the following purposes:

To improve the attractiveness and usability of our websites,
To detect technical problems on our website at an early stage.
to deliver the contents of our website correctly,
and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.

3.3. Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f DSGVO). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare. Please compare the explanations under "Collection of general access information".

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f DSGVO not to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful is to be determined in the context of a balancing of interests.

The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.

For more information on objection and removal options vis-à-vis Cloudflare, please visit:Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit:

https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf.

3.4. Contact us by e-mail or contact form

We offer you on our site the possibility to contact us by e-mail and/or via a contact form.

If you contact us by e-mail or via a contact form, the personal data you provide will be stored automatically.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request serves the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested. This personal data is not passed on to third parties. For example, you will not be automatically entered in our newsletter if you use our contact form.

The data you send to the company via contact requests will remain with us until your request has been fully processed or you revoke your consent to storage or the purpose for storing the data no longer applies. Legal provisions - in particular statutory retention periods - remain unaffected.

3.5. Registration on this website

We offer you the opportunity to register on our website by providing your personal data.

For the registration in the customer area, we need the following mandatory information from you:

Last name;
Company address;
E-mail address;
Tax number;
VAT ID;
Phone number;
Website link;
Department;
As you have learned from us.

The personal data you enter is collected and stored exclusively for internal and our own purposes. Depending on the purpose of the processing, a transfer to one or more order processors, such as shipping companies, may take place, provided that they are used to fulfill the service requested by you.

The registration of the data subject by voluntarily providing personal data serves to offer you content or services that can only be offered to registered users. You can correct/supplement the personal data provided during registration at any time.

3.6. Shop system (customer account)

We use your personal data, which you enter when registering for a store access, to set up a password-protected direct access to your personal customer account. To set up a store access for you, we need the following information from you:

First and last name
E-mail address

After sending the registration, you will receive a confirmation email for legal reasons to complete your registration order for the creation of a customer account.

The data mentioned here will be used exclusively for the creation of a customer account and for sending the confirmation email.

After confirming your customer account, you can deposit and manage your contact and address data as well as your desired payment methods and view data about your completed, open and recently shipped orders. You agree to keep your personal access data confidential and not to make it available to any unauthorized third party. After you have finished communicating with us, you should always log out of your customer account.

3.7. Data transmission at the conclusion of a contract for online stores, merchants and shipment of goods

We transmit personal data to third parties only if this is necessary in the context of the contract, such as to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Data transfer for credit assessment

If we make advance payments, e.g. in the case of purchase on account, we reserve the right to obtain information on identity and creditworthiness from specialized service providers (credit agencies) in order to protect our legitimate interests.

For this purpose, we transmit your personal data required for a credit assessment to the following company(ies):

Company: Atradius Credit Insurance,
Branch of Atradius Crédito y Caución S.A. de Seguros y
Street: Opladener Straße 14
Postcode/Place: 50679 Cologne
Email:

3.8. Data transfer for contract fulfillment

For the fulfillment of the contract, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service.

In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process.

In this respect, the privacy policy of the respective payment service provider shall apply.

Payment guarantee

In case of payment via the payment methods "purchase on account", "direct debit", (depending on which payment method(s) are offered) the purchase price claim is assigned via Novalnet AG as payment institution to Financial Management Solutions GmbH (under the brand InfinitePay), (hereinafter referred to as "InfinitePay"). The data required to process the payment will be transmitted to InfinitePay. The data transfer serves, among other things, the purpose that InfinitePay can carry out an identity and credit check for the processing of your purchase with the payment method requested by you. The processing is carried out on the basis of Art. 6 (1) lit. f DSGVO due to the legitimate interest in offering different payment methods as well as the legitimate interest in protection against payment default. You have the right to object at any time to this processing of personal data concerning you based on Art. 6 (1) lit. f DSGVO for reasons arising from your particular situation by notifying us. The privacy policy of Infinite-Pay can be found here:

https://www.infinitepay.de/datenschutzhinweise.

If you wish to obtain information about the use of personal data concerning you, you can contact [email protected] at any time. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide the data will result in the contract not being concluded with the payment method you requested.

3.9 Transmission of application documents

In the course of your application (online application by mail), we collect and process various personal application data.

This includes in particular your

Contact information (name, address, phone number and email;
Application materials (cover letter, resume, certificates or other educational credentials and qualifications.

In the context of an online application via the application form, the transmission is carried out exclusively via an encrypted page in accordance with the currently recognized state of the art, so that your personal data and your application documents are protected against manipulation and unauthorized access.

After sending, you will receive an e-mail confirming receipt of the application documents. Your personal application data will be collected and processed exclusively for the purpose of filling vacancies within our company. Your data will only be forwarded to the internal departments and specialist departments of our company responsible for the specific application process. Your personal application data will not be passed on to other companies without your prior express consent. Your application data will not be used or passed on to third parties beyond this.

As a rule, your personal application data will be deleted automatically three months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage for future job advertisements, for example.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

4. Newsletter

4.1. Sending newsletter

On our website, we offer you the opportunity to subscribe to our newsletter, through which we will inform you at regular intervals about offers, products and information of the company. To receive our newsletter, you need a valid e-mail address.

For the sending of a personalized newsletter we need the following information from you:

First and last name
E-mail address

After sending the registration, you will receive a confirmation email for legal reasons to complete your registration order to receive the newsletter.

The data mentioned here will be used exclusively for sending the newsletter. The processing of the personal data entered in the registration form is based exclusively on your consent (Art. 6 para. 1 lit. A DSGVO). You can revoke your consent to the storage of the data (e-mail address [possibly other personal data]) and its further processing for the purpose of sending the newsletter at any time.

The data you have deposited with the company for the purpose of receiving the newsletter will be stored by the company until the complete termination of the receipt of the newsletter (in particular the cancellation by you).

The newsletter is sent with the help of the CRM system Pipedrive (double opt in). The service provider is contractually obligated to handle the data in a DGSVO-compliant manner. This personal data is not passed on to third parties.

4.2. Blog comment function

We offer you a blog on our website and the possibility to leave individual comments on individual blog posts. A blog is a portal on a website, usually publicly viewable, in which one or more people, called bloggers, can post articles or write down thoughts in so-called blogposts. The blogposts can usually be commented on by you.

If you leave a comment on our blog, in addition to the comments left by the data subject, information on the time of comment entry and the user name (pseudonym) chosen by the data subject will be stored and published. Furthermore, your IP address will also be logged. This storage of the IP address takes place for security reasons and in the event that the rights of third parties are violated by a submitted comment or illegal content is posted. The storage of this personal data is therefore in our own interest, so that we can provide evidence in the event of a violation of the law, if necessary. This personal data will not be passed on to third parties, unless such a transfer is required by law or serves the legal defense.

Subscription to comments on the blog on the website

The comments made in our blog can generally be subscribed to by third parties.

If you choose the option to subscribe to comments, we will send an automatic confirmation email to verify that the owner of the email address provided has indeed opted in to this option (double opt in). The option to subscribe to comments can be terminated at any time.

5. Use and application of further tracking, analysis tools and social plugins

Happyware currently does not use any other tracking, analysis tools and social plugins, except for the tools listed in section 4ff. Should this change, you will find information about this tool and the purpose of the data processing, the type of data, the legal basis of the data processing and a notice of objection here.

5.1. Use of Google Analytics

We use the web analytics service Google Analytics of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. Google Analytics uses cookies that allow an analysis of your use of the website (browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (abbreviated and anonymized IP address), time of server request). The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles. The processing is based on Art. 6 para. 1 lit. f DSGVO from the legitimate interest in the demand-oriented and targeted design of the website.

You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) f DSGVO for reasons arising from your particular situation.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

[https://tools.google.com/dlpage/gaoptout?hl=de].

To prevent the collection by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. If you click here, the opt-out cookie will be set: Disable Google Analytics.

For more information on terms of use and data privacy, please visit

https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

5.2. Use of the remarketing or "similar target groups" function of Google Inc.

We use the remarketing or "similar target groups" function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. This function serves the purpose of analyzing visitor behavior and visitor interests. Google uses cookies to perform the analysis of website usage, which forms the basis for the creation of interest-based advertisements. The cookies are used to record visits to the website and anonymized data on website usage. No personal data of the website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.

Your data may also be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles. The processing is carried out on the basis of Art. 6 (1) lit. f DSGVO for the legitimate interest of targeting visitors to the website with advertising by displaying personalized, interest-based advertising ads for visitors to the provider's website when they visit other websites in the Google Display Network.

You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) f DSGVO for reasons arising from your particular situation.

You can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there:

https://support.google.com/ads/answer/7395996?hl=de.

Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and implementing the further opt-out information provided there.

You can find more information on Google Remarketing and the associated privacy policy at:

https://www.google.com/privacy/ads/

5.3. Use of Google Adwords conversion tracking

We use the online advertising program "Google AdWords" on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. Thus, there is no way that cookies can be tracked across AdWords customers' websites. The information obtained with the help of the conversion cookie is used to create conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles. The processing is based on Art. 6 (1) lit. f DSGVO from the legitimate interest in targeted advertising and the analysis of the effect and efficiency of this advertising.

You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f DSGVO for reasons arising from your particular situation. To do so, you can prevent the storage of cookies by selecting the appropriate technical settings of your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics. Furthermore, you can deactivate personalized advertising for you in Google's advertising settings. You can find instructions on how to do this at

https://support.google.com/ads/answer/2662922?hl=de.

In addition, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out mentioned there. Further information as well as Google's privacy policy can be found at:

https://www.google.de/policies/privacy/

5.4. Use of Google AdSense

We use the AdSense function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. This function serves the purpose of renting advertising space on the website and targeting visitors to the website with interest-based advertising. By means of this function, personalized, interest-related advertising ads from the Google Display Network are displayed to the visitors of the Provider's website. In doing so, Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles. The processing is based on Art. 6 (1) lit. f DSGVO from the legitimate interest in the above purpose.

You have the right to object at any time to this processing of your personal data based on Art. 6(1)(f) DSGVO for reasons relating to your particular situation. You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there:

https://support.google.com/ads/answer/7395996?hl=de.

Furthermore, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out mentioned there. You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

For more information and Google's privacy policy, please visit:

https://www.google.com/policies/technologies/ads/,

https://www.google.de/policies/privacy/ .

5.5. Use of Google Maps

We use the function for embedding GoogleMaps maps of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The function enables the visual display of geographical information and interactive maps. Google also collects, processes and uses data from visitors to the pages in which GoogleMaps maps are integrated. More information on the collection and use of data by Google can be found in the privacy policy of Google at

https://www.google.com/privacypolicy.html.

There you also have the option in the Privacy Center to change your settings so that you can manage and protect your data processed by Google. Your data may also be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles. You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) f DSGVO for reasons arising from your particular situation. To do so, you must switch off the JavaScript application in your browser. However, we would like to point out that in this case you may not be able to use all functions of this website, such as the interactive map display, to their full extent.

5.6. Use of Facebook Pixel

We use the "Custom Audiences" remarketing function of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website. Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at

https://www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Articles 13, 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations pursuant to Articles 33, 34 of the GDPR to the extent that a personal data breach affects our obligations under the joint processing agreement.

Meta Platforms Ireland is responsible for enabling data subject rights under Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR with respect to the security of the Service, and for complying with the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects Meta Platforms Ireland's obligations under the Joint Processing Agreement. The application serves the purpose of targeting the visitors of the website with interest-based advertising on the social network Facebook. For this purpose, the remarketing tag of Facebook has been implemented on the website. Via this tag, a direct connection to the Facebook servers is established when the website is visited. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalized, interest-related Facebook ads. Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus committed to comply with European data protection principles.

The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at:

https://www.facebook.com/legal/EU_data_transfer_addendum.

The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest to target the site visitors with interest-based advertising.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. You can deactivate the "Custom Audiences" remarketing function here. For more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy, please refer to Facebook's privacy policy

https://www.facebook.com/about/privacy/.

5.7. Use of social plugins on our website by means of "Shariff":

We use social network plug-ins on our website. To keep you in control of your data, we use the privacy-safe "Shariff" buttons.

Without your explicit consent, no links to the servers of social networks are established and consequently no data is transmitted. "Shariff" is a development of the specialists of the computer magazine c't. It enables more privacy on the net and replaces the usual "share" buttons of the social networks. More information about the Shariff project can be found here:

https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html .

When you click on the buttons, a pop-up window appears in which you can log in to the respective provider with your data. Only after this active login by you, a direct connection to the social networks is established. By logging in, you give your consent to the transfer of your data to the respective social media provider. Here, among other things, both your IP address and the information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the collected information will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. Social networks named below are integrated by means of the "Shariff" function. For more information on the scope and purpose of the collection and use of the data, as well as your rights in this regard and options for protecting your privacy, please refer to the linked data protection notices of the providers.

Google+ of Google Inc (1600 Amphitheatre Parkway, Mountain View, California, 94043 USA)

https://www.google.com/intl/de/+/policy/+1button.html

Facebook of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)

https://www.facebook.com/policy.php

Instagram of Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA)

https://help.instagram.com/155833707900388

Xing of XING SE (Dammtorstraße 30, 20354 Hamburg)

https://www.xing.com/privacy

5.8. Use of Yandex Metrica

We use Yandex.Metrica, a web analytics and click tracking service provided by Yandex, located at 119021 Moscow, L. Tolstoy St., 16. The information generated by the use of the service about your use of our website (including your IP address) is transferred to a Yandex server in the Russian Federation and stored there.

The legal basis for the processing of the users' personal data is Art. 6 para. 1 lit. a) DSGVO (consent), which you can give via the cookie banner.

Cookies are used on your terminal device for this purpose. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. Yandex will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Yandex may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Yandex's behalf.

As a suitable guarantee of the lawfulness of these data transfers, we have concluded appropriate data protection agreements with Yandex Metrica.

You can object to this form of data collection and storage at any time with effect for the future.

To do this, you can go to the cookie banner again and adjust your settings.

Alternatively, you can object to the data collection by Yandex Metrica for the future by having an opt-out add-on set, which you can download at the following link:

https://yandex.com/support/metrica/general/opt-out.xml.

For more information on privacy related to Yandex Metrica, please see the following link:

https://yandex.ru/legal/metrica_agreement/.

5.9. Use of YouTube

We use the YouTube video embedding function of YouTube LLC. on our website. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube"). YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos deposited with YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video, information about it is transmitted to YouTube and stored there. For more information about the collection and use of data by YouTube and Google, about your rights in this regard and options for protecting your privacy, please refer to the privacy policy of YouTube

https://www.youtube.com/t/privacy.

6. Legal basis and lawfulness of processing

The processing of personal data is only lawful if there is a legal basis for the processing. Legal basis for the processing can be according to Article 6 para. 1 lit. a - f DSGVO in particular:

The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;
the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request;
processing is necessary for compliance with a legal obligation to which the controller is subject;
the processing is necessary in order to protect the vital interests of the data subject or another natural person;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Unless already stated at the appropriate place in this Privacy Policy, the following applies:

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you e-mail offers for similar products to those you have already purchased from our range.

You have the option to cancel the newsletter at any time and to revoke your consent for the use of your data for the newsletter dispatch. For this purpose, you will find a corresponding link in each newsletter.

When processing personal data for which we obtain the consent of the data subject, Article 6 (1), sentence 1 a) of the General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1), sentence 1 b) (DSGVO) serves as the legal basis. This provision also covers processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 para. 1, sentence 1 c) (DSGVO) serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Article 6 (1) sentence 1 f) (DSGVO) serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimization and maintenance of the security of our online offer.

7. Deletion, blocking and duration of storage of personal data

We process and store your personal data only for the period of time required to achieve the respective storage purpose or as required by the various retention periods provided by law.

After the end of a storage purpose or after the expiration of the retention period provided by law, the personal data will be routinely blocked or deleted for further processing in accordance with the statutory provisions.

8. Data protection rights of the data subject/your rights

If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights according to the GDPR:

Insofar as consents to the processing of your personal data are required, these can be given verbally, in writing or by e-mail. The company is obliged to prove that consent has been given. You may revoke an already granted consent at any time, Art. 7 (3) DSGVO. The revocation can be sent orally, in writing or by e-mail to the responsible entity (see section 2 of this agreement). You are obliged to provide evidence of the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Within the scope of the applicable legal provisions, you have the right to obtain information about your stored personal data (Art. 15 DGSVO), as well as the right to rectification (Art. 16 DGSVO), deletion (Art. 17 DGSVO), restriction of processing (Art. 18 DGSVO), and data portability (Art. 20 DGSVO). These rights can be asserted in writing or by e-mail to the controller (see section 2 of this agreement).
Object to processing for the protection of own interests (Art. 21 (1) DSGVO): If the data processing is based on Art. 6 (1) (e) or (f) DSGVO, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. This right can be asserted in writing or by e-mail to the controller (see Section 2 of this agreement). If you object, the company will no longer process your personal data concerned, unless the company can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to complain about the company's data processing to the competent supervisory authority, Art. 77 DSGVO.

9. Transmission of data to third parties

We generally do not sell or lend user data. A transfer to third parties beyond the scope described in this privacy policy only takes place if this is necessary for the processing of the respective requested service.

We only transfer data if there is a legal obligation to do so. This is the case if government institutions (e.g. law enforcement agencies) request information in writing or if a court order has been issued.

A transfer of personal data to so-called third countries outside the EU / EEA area does not take place.

10. Statutory or contractual provisions on the provision of personal data and possible consequences of non-provision

We hereby point out that the provision of personal data in certain cases (e.g. tax regulations) is required by law or may result from contractual provisions (e.g. information on the / the contractual partner). For example, it may be necessary for the conclusion of a contract that the data subject/contractual partner must provide his/her personal data so that his/her request (e.g. order) can be processed by us at all. An obligation to provide personal data arises primarily when a contract is concluded. If in this case no personal data is provided, the contract with the person concerned cannot be concluded. Before providing personal data by the data subject, the data subject may contact our data protection officer or the controller. The data protection officer or the controller will then inform the data subject whether the provision of the required personal data is prescribed by law or contract or is necessary for the conclusion of the contract and whether an obligation arises from the concerns of the data subject to provide the personal data or what the consequences are for the data subject of not providing the required data.

11. Existence of automated decision making

As a responsible company, we do not use automatic decision-making or so-called profiling in our business relationships.

12. Additional information

In addition to this web-specific data protection information, it is also possible to view our transparent information.