Wunschzettel

Privacy Policy

Privacy Policy

 

Thank you for visiting our website. We take the protection and safety of your personal information when you visit our website very seriously. Therefore, we would like to inform you here about the personal data we collect while you visit our website and what we use it for. This privacy statement applies to ARCTIC® GmbH’s internet offering, which is available on the domain www.arctic.de and on the various sub-domains.

Who is the data controller and how can I contact you?

Data controller for the processing of personal data in terms of the EU’s General Data Protection Regulation (GDPR).


ARCTIC GmbH
Bevenroder Straße 149
38108 Braunschweig
Deutschland
Telefon: +49 531 60947217
E-Mail: info@arctic.de


Data Protection Officer
Philipp Herold
Hafenstraße 1a
23568 Lübeck
E-Mail: privacy@arctic.de


What is it about?

This privacy statement complies with the legal stipulations on transparency when processing personal data. This is all the information relating to an identified or identifiable natural person. This includes such information such as your name, age, address, phone number, date of birth, e-mail address, IP address or user actions when visiting a website. Information with which we cannot (or only with unreasonable effort) establish a reference to you as a person, e.g., through anonymisation, is not personal data. Processing personal data (e.g., collecting, querying, using, retaining or sharing) always requires a legal basis and a defined purpose.


Retained personal data is deleted as soon as the processing purpose has been achieved and there are no lawful reasons for retaining the data any longer. During the individual processing operations, we will inform you about the specific retention periods and/or criteria for retention. Regardless of that, we will retain your personal data in individual cases to assert, exercise or defend legal claims or if there are legal retentions requirements.


Who receives my data?
We will only share your personal data that we process on our website with third parties if it is required to fulfil our purposes and is, in individual cases, covered by the legal basis (e.g., consent or safeguarding of legitimate interests). In addition, we will share personal data with third parties in individual cases to assert, exercise or defend legal claims. Potential recipients may be law enforcement agencies, lawyers, auditors, courts, etc.


Insofar as we use service providers to host our website, who process personal data according to Art. 28 GDPR within the framework of order processing on our behalf, they may be the recipients of your personal data. For more information about using processors and web services, please see the overview of the individual processing operations.

Do you use cookies?
Cookies are small text files that we send to your terminal device’s browser—where they are stored—while you visit our web pages. As an alternative to using cookies, information may be stored locally in your browser. Some functions of our website cannot be provided without using cookies and/or local storage (technically necessary cookies). Other cookies, however, enable us to perform a variety of analyses so that we can, e.g., recognise the browser you use when you re-visit our website and send different types of information to us (non-necessary cookies). Cookies help us, among other things, to improve your user experience and make our on-line offering more effective by enabling us to understand how you use our website and to determine your preferred settings (e.g., country and language settings). If third parties use cookies to process information, they will collect the information directly from your browser. Cookies do not harm your terminal device. They cannot run any programs and do not contain any viruses. For information about the services for which we use cookies, please see the individual processing operations.


Domain Name Description
www.arctic.de PHPSESSID Cookie generated by applications based on the PHP language. This I a generic identifier use to manage user session variables. It is usually a randomly generated number, as it is used can be specific to the website, but a good example is maintaining a logged in status for a user between pages.
www.arctic.de csrf[frontend.checkout.switch-language]
www.arctic.de csrf[frontend.checkout.line-item.add]
www.arctic.de session-
www.arctic.de timezone
www.arctic.de csrf[frontend.detail.switch]
www.arctic.de csrf[frontend.form.contact.send]
www.arctic.de CookieConsent This cookie stores the user's cookie permission status for the current domain.
.arctic.de _gcl_au Used by Google AdSense to experiment with the efficiency of advertising on websites using their services
.arctic.de _ga This Cookie Name is linked to Google Universal Analytics- an important update for Google´s more frequently used analysis service. This Cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request in a website and is used to calculate visitors, session campaign data for website analysis reports. By default its expires after 2 years, although this can be adjusted by website owners.
.arctic.de _gid This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and no information will be available from Google from spring 2017. It seems to store and update a unique value for each page visited.
.doubleclick.net test_cookie This cookie is set by DoubleClick (which is owned by Google) to create a profile of your interests and display relevant ads on other websites.
.arctic.de _gat_UA-162272301-1 This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.


What rights do I have?

Under the provisions stipulated by the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), you as the data subject have the following rights:
• Information, according to Art. 15 GDPR, Sect. 34 BDSG, to the data retained about you in the form of meaningful information about details of the processing and a copy of your data;
• Correction, according to Art. 16 GDPR, of incorrect or incomplete data we retain;
• Deletion, according to Art. 17 GDPR, of the data we retain, unless processing is required (i) to exercise the right to freedom of expression and information; (ii) to fulfil a legal obligation; (iii) for reasons of public interest; or (iv) to assert, exercise or defend legal claims;
• Restriction of processing, according to Art. 18 GDPR, insofar as (i) the data’s correctness is disputed, (ii) processing is unlawful, (iii) we no longer need the data and you refuse to have it deleted because you need it to assert, exercise or defend legal claims or you have lodged an objection to processing according to Art. 21 GDPR.
• Data portability, according to Art. 20 GDPR, insofar as (i) you provided us with your personal data while giving your consent according to Art. 6 Para. 1 lit. a GDPR or on the basis of a contract according to Art. 6 Para. 1 lit. b GDPR, and (ii) we processed this data by automatic means. You will receive your data in a structured, common and machine-readable format and/or we will transmit your data directly to another data controller, if technically feasible.
• Objection, according to Art. 21 GDPR, to the processing of your personal data insofar as this occurs on the basis of Art. 6 Para. 1 lit. e, f GDPR and there are reasons resulting from your particular situation, or if you object to direct marketing. There is no right to objection if we can prove that there are overriding, mandatory legitimate reasons for processing or if we process the data to assert, exercise or defend legal claims. Insofar as individual processing operations do not allow for a right to objection, it will be stated there.
• Withdrawal, according to Art. 7 Para. 3 GDPR, of your consent, with future effect.
• Complaint, according to Art. 77 GDPR, with a supervisory authority if you believe that the processing of your personal data violates the GDPR. In general, you can contact the supervisory authority of your usual place of residence or work or the place of our registered office.

The use of cookies or comparable technologies is carried out on the basis of Art. 25 para. 2 TTDSG. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our range of services. You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR, for reasons relating to your personal situation.


How is my data processed in detail?
Below, we will inform you about the individual processing operations, scope and purpose of data processing, legal basis, obligation to provide your data, and the relevant retention periods. Automated decision-making in individual cases, including profiling, is not performed.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically sends to our server. The following information is temporarily stored in a log file:
• IP address of the requesting computer
• date and time of access
• name and URL of retrieved file
• website used for access (referrer URL)
• browser used and, where applicable, your computer’s operating system and your access provider’s Name

Our website is hosted by a service provider which, for the purpose of providing the website, processes the data mentioned above on our behalf according to Art. 28 GDPR.

Purpose and legal basis
Processing occurs to safeguard our overriding legitimate interest to display our website and ensure its security and stability on the basis of Art. 6 Para. lit. f GDPR. The collection of data and its retention in log files are mandatory for operating the website. No right to object to processing exists because of the exception according to Art. 21 Para. 1 GDPR. Insofar as further retention of the log files is legally stipulated, processing is based on Art. 6 Para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but accessing our website is technically not possible without providing the data.


Retention period
The data named above is retained while the website is displayed and, for technical reasons, at the most for an additional 7 days.

Use of "EU Cookie Directive Pro + automatic cookie recognition"

On our website, we use the consent management tool "EU Cookie Directive Pro + automatic cookie recognition" from ACRIS E-Commerce GmbH (Am Pfenningberg 60, 4040 Linz, Austria; "ACRIS"). The tool enables you to give your consent to data processing via the website, in particular to set cookies, as well as to make use of your right of revocation for consents already given. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus to comply with legal obligations. Cookies may be deployed for this purpose. In addition to general user data, your IP address is collected and transmitted to ACRIS. This data will not be passed on to any other third parties. The data processing is carried out on the basis of Article 6(1)(c) GDPR to comply with a legal obligation. For more information about Acris’s privacy policy, please visit: https://www.acris-ecommerce.at/datenschutz/.

 

Collection and processing in case of applications via e-mail

In case of interest, website visitors may apply to vacancies advertised on our website by e-mail. We only collect your personal data to the extent provided by you. This includes your contact details (e.g., name, e-mail address, telephone number), details of your professional qualifications and training, details of further professional training and performance-specific evidence.

The purpose of this data processing is to contact you and to decide on the establishment of an employment relationship with you. The provision of the data is necessary to carry out the application procedure. The processing of your personal data takes place on the basis of Art. 6 para. 1(b) GDPR in conjunction with Art. 26 para. 1 Federal Data Protection Act (BDSG) for the implementation of pre-contractual measures (undergoing the application procedure as an initiation of the employment contract).

If you have given us permission for the processing of personal data for the inclusion in our pool of applicants, e.g., by checking a checkbox, the processing takes place on the basis of Art. 6 par. 1(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

If specific categories of personal data within the meaning of Art. 9 para. 1 of the GDPR are requested from the applicants, such as information on the degree of severe disability, this is carried out on the basis of Art. 9 para. 2(b) GDPR, so that we can exercise the rights arising from labor law and the social security and social protection legislation and fulfill our obligations in this regard.

We will store your personal data as long as this is necessary for the decision about your application. Your data will then be deleted after six months at the latest, provided that you have not consented to further processing and use. If an employment relationship is established following the application procedure, the data provided will be further processed and then transferred to the personnel file for the purposes of implementing the employment relationship pursuant to Art. 6 para. 1 (b) GDPR in conjunction with Art. 26 Para. 1 of the Federal Data Protection Act (BDSG).

Contact form
Type and scope of processing
On our website we offer you the possibility to contact us via a provided form. The information collected through mandatory fields is required to process the request. In addition, you may voluntarily provide additional information that you believe is necessary to process the contact request. When using the contact form, your personal data will not be passed on to third parties.


Purpose and legal basis
The processing of your data by using our contact form is for the purpose of communicating and processing your enquiry based on your consent in accordance with Article 6(1)(a) GDPR.
Insofar as your enquiry relates to an existing contractual relationship with us, processing for the purpose of fulfilling the contract is based on Article 6(1)(b) GDPR.
There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this information, please contact us by other means.


Retention period
If you use the contact form on the basis of your consent, we store the data collected for each enquiry for a period of three years, starting with the completion of your enquiry or until your consent is revoked.
If you use the contact form within the framework of a contractual relationship, we will store the data collected for each enquiry for a period of three years from the end of the contractual relationship


Newsletter
Type and scope of processing
If you register on our website to receive our newsletter, we collect your e-mail address as well as your first names and surname and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration within 72 hours, it will automatically expire and the data will not be processed for sending the newsletter.
To send the newsletter we use a service of rapidmail GmbH, which processes your personal data on our behalf in accordance with Article 28 GDPR. Your data will not be passed on to third parties.


Purpose and legal basis
We process your data for the purpose of sending you the newsletter on the basis of your consent in accordance with Article 6(1)(a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Article 7(3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.


Retention period
After registering for the newsletter, we store the data for a maximum of 72 hours until the registration is confirmed. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter) and for technical reasons for a maximum of 7 days.


Registering a user account
Type and scope of processing
In order to use certain sections of our website, you have the option of registering a user account. The information collected from mandatory fields during the registration process is required for the purpose of granting access to the user account. Furthermore, you can voluntarily provide additional information for additional (comfort) functions.
Registering a user account results in no sharing of your personal data beyond providing the website (see above).


Purpose and legal basis
We process your data to provide a user account for fulfilling a contract with you according to Art. 6 Para. 1 lit. b GDPR. There is a contractual obligation to provide your data as this information is required to identify you and fulfil our contractual obligation. There is no legal obligation to provide the data. If you do not provide this information, it is not possible to register a user account and thus conclude a contract.
Furthermore, the processing of additional, voluntarily provided information for the purpose of providing further (comfort) functions is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. By deactivating the functions / deleting the voluntary information in the user account, you can declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR.


Retention period
We will retain your personal data while providing the user account for the duration of the contractual relationship. After [termination of the contract / deletion of the user account], your data is only retained if there are legal retention obligations (e.g., tax or trade law).
Additional information, that you provide to us on the basis of your consent, will only be stored until you revoke your consent by deactivating the functions / deleting the data, but no longer than until the end of the contract on which the provision of the user account is based.

Registration of a customer account
Type and scope of processing
Within the scope of order processing, we collect your personal data to register a customer account. You can choose whether you order as a guest or register a permanent user account. The information collected during registration via the mandatory fields is identical in both cases and is required for the processing of your order in the online store. If you register a permanent user account, we will also collect a password that you choose yourself. Furthermore, you can voluntarily provide additional information that you consider necessary for the processing of the order.
Your personal data will only be passed on to third parties (e.g. shipping service provider / forwarding agent) and order processors in accordance with Art. 28 GDPR as far as this is necessary for the processing of the order.

Purpose and legal basis
We process your personal data for the purpose of registering a customer account in accordance with Art. 6 para. 1 lit. b GDPR to fulfill a contract with you. There is a contractual obligation to provide your data as far as it relates to the mandatory fields, as this information is necessary for the identification of your person as well as for the fulfilment of the contract on our part. There is no legal obligation to provide the data. Without the provision of this information, the order in our online store and thus a conclusion of contract is not possible.
There is no obligation to provide any additional information provided voluntarily. The order in our online store is also possible without the disclosure of voluntary information.
The additional processing of your password for the registration of the permanent user account is carried out for the purpose of providing a customer account and for the presentation of your previous purchases as well as for the storage of your purchase-related data (e.g. storage of invoice address, different delivery addresses) on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. By deleting your customer account, you can declare your revocation according to Art. 7 para. 3 GDPR at any time with effect for the future.

Retention period
If you order as a guest, your personal data will be stored until your order is processed completely (end of contract). If you register a permanent customer account, we will store the purchase-related data beyond the end of the contract until your consent is revoked (deletion of the customer account). In both cases, further storage of your data will only take place if there is a legal obligation to retain data (e.g. tax and commercial law).

Comment function

Type and scope of processing

If you use the comment function on our website, we collect your [name, e-mail address, user name or similar, comment / message] and save this data together with the IP address and date. If you write comments as a registered user, we will also assign them to your user account.

For the use of the comment function none of your personal data will be passed on to other recipients.

Purpose and legal basis
The processing of your personal data for the purpose of commenting contents on our website occurs on the basis of your consent in accordance with with Art. 6 para. 1 lit. a GDPR. By informally informing/deleting your comments, you can declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data, but the use of the comment function is not possible without disclosing your data.

Retention period
We store your personal data until you revoke your consent, but no longer than until the termination of your user account and, for technical reasons, beyond that for a maximum of 7 days.


Google Ads

Type and scope of processing
We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyse user behaviour and recognize users.
Google Ads collects information about visitor behaviour on various websites. This information is used to optimize the relevance of the advertising. Google Ads also delivers targeted advertising based on behavioural profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.
If you are registered with a Google Ireland Limited service, Google Ads may associate your visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find and store your IP address and other identifiers. In this case your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Your data may be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.


Purpose and legal basis
We process your data with the help of Google Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. ou can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.


Retention period
The specific storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. You will find further information in the privacy policy for Google Ads: https://policies.google.com/privacy.


Google Analytics 4

We use the Google Analytics web analytics service provided by Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website.

The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Both Google and US government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you.

When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in anonymized form. The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

We also use the Google Signals service in this context. Google Signals enables cross-device tracking. Hence, your data can be analysed across devices if you have enabeled "personalised advertising" in your account settings and your end devices are linked to your Google account. This makes it possible to identify which device is searching for products and then return to complete purchases on another device, such as a tablet.The cross-device reports created in this context contain only aggregated data. We therefore only receive statistics generated on the basis of Google Signals. To prevent Google Signals from collecting and storing data across devices, you can deactivate the "personalised advertising" function in your Google Account settings. For more information, please visit https://support.google.com/ads/answer/2662922?hl=de. For more information on data processing and data protection for Google Signals, please visit https://support.google.com/analytics/answer/7532985?hl=en.

Google Analytics 4 Opt-out Browser Add-on
https://tools.google.com/dlpage/gaoptout?hl=en

Google User ID

This website uses Google Universal Analytics with the additional "User ID" function. A User ID is a unique, permanent and non-personalized string that we assign to you personally and not to a device. This allows your visit and user behavior on our website with different end devices (e.g., smartphone, tablet, laptop) to be recorded. We only assign a user ID to you if we can clearly identify you as a user. This is usually the case when you register on our platform for the first time. We do not combine the data collected under the User ID with your personal data. Only the pseudonymized user ID is transmitted to Google Universal Analytics and used as your pseudonym in relation to Google; other data and information in connection with your account is not transmitted to Google. Your user behavior on our websites and your user ID will then be transmitted to Google servers in the USA, stored there and processed for the purpose of analysis. Google links the transmitted information to pseudonymized user profiles and makes them available to us again in summarized form. We do not combine these transmitted user profiles with your personal data. This excludes the possibility of identifying specific persons. You can object to the transmission of a user ID to Google by sending us an email with "Privacy: User ID" in the subject line.

Google DoubleClick

Type and scope of processing
DoubleClick by Google components are embedded in our website. DoubleClick is a Google brand marketing mostly special on-line marketing solutions for advertising agencies and publishers. With every impression, click or other activity, DoubleClick by Google transmits data to the DoubleClick server.
Each data transmission triggers a cookie request from the data subject’s browser. If the browser accepts this request, DoubleClick will place a cookie in your browser.
DoubleClick uses a cookie ID, which is required for the technical procedure. This cookie ID is needed, e.g., to show an ad in a browser. Using the cookie ID, DoubleClick can also record the ads already shown in a browser to prevent duplicate showings. DoubleClick also uses the cookie ID to record conversions. Conversions are recorded, for example, when a user has previously seen a DoubleClick ad and then uses that internet browser to make a purchase on the advertiser’s website.
A DoubleClick cookie contains no personal data but may contain additional campaign IDs. Campaign IDs are used to identify the campaigns you have already been in contact with on other websites. In the course of this service, Google is informed about data also used by Google to create commission settlements. Among other things, Google can see that you clicked certain links on our website. In this case, your data is shared with operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information and DoubleClick by Google’s applicable privacy policies, please see https://policies.google.com/privacy.


Purpose and legal basis
We process your data with the help of the DoubleClick cookie to optimise and show ads on the basis of your consent according to Art. 6 Para. 1 lit. a GDPR. You give your consent by accepting the use of cookies (cookie banner/consent manager), which you can also use at any time to withdraw your consent with future effect according to Art. 7 Para. 3 GDPR. The cookie is used, among other things, to enable and show user-relevant ads as well as to create and improve reports about marketing campaigns. Furthermore, the cookie is used to avoid multiple showings of the same ad. Each time you access an individual page of our website where a DoubleClick component is integrated, this DoubleClick component causes your browser to automatically send data to Google for on-line ads and settling commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restrictions, but you may not have access to all its functionality.


Retention period
We have no influence over the specific retention period of the processed data; it is determined by Google Ireland Limited. For more details, please see the privacy statement for Google DoubleClick: https://policies.google.com/privacy.


Google Services
Type and scope of processing
We use Google Services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to access additional services and data from Google Ireland Limited. This involves the transfer of your IP address to Google Ireland Limited. Please note that there is a separate section in this Privacy Policy for each additional service we use from Google Ireland Limited.


Purpose and legal basis
The use of Google Services is based on our legitimate interests, i.e. interest in optimising our online offer in accordance with Art. 6 Para. 1 lit. f. DSGVO.


Retention period
The concrete retention period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Services: https://policies.google.com/privacy.


Google Tag Manager
Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website
This allows us to flexibly integrate additional services in order to evaluate user access to our website.


Purpose and legal basis
The use of Google Tag Manager is based on our legitimate interests, i.e. interest in the optimisation of our services in accordance with Art. 6 para. 1 lit. f. DSGVO.


Retention period
The concrete retention period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://www.google.com/analytics/terms/tag-manager/.


Use of the remarketing or "similar target groups" function by Google Inc. Our website uses the remarketing or "similar target groups" function by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This application serves to analyse visitor behaviour and visitor interests. Google uses cookies to analyse website use, forming the basis for producing interest-related adverts. Cookies allow for the recording of website visits as well as anonymised data on the use of the website. The personal data of website visitors is not saved. If you then visit another website in the Google display network you will then be shown adverts which are more likely to take previous areas of product and information interest into account.

Your data may be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can find more detailed information on Google remarketing as well as the associated data privacy policy at: https://www.google.com/privacy/ads/.


Use of Facebook Pixel and Conversions API

On our website, we use the “Custom Audiences” remarketing feature, the “Lookalike Audiences” target group feature, and the Conversions API from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland “Facebook”).

The purpose of the “Custom Audiences” feature is to address website visitors with targeted advertising (“Facebook Ads” or “Instagram Ads”) on the Facebook and Instagram social networks as well as on Facebook partner sites. For this purpose, we have implemented the Facebook remarketing tag (also called the Facebook Pixel) on our website. Among other things, the Facebook Pixel uses cookies, i.e. small text files that are stored locally in your web browser cache on your device. When you visit our website, the remarketing tag creates a direct connection to the Facebook servers, transferring the information on what web pages you have visited and what kind of interactions have taken place to them. In this case, the Facebook Pixel also allows us to check whether you were redirected to our website after clicking on our Facebook or Instagram Ads. Facebook assigns this information to your personal Facebook/Instagram user account. When you visit the Facebook or Instagram social network, you will then see personalized, targeted “Facebook Ads” or “Instagram Ads”. The data collected about you is pseudonymized for us and doesn’t allow us to draw any conclusions about your identity. However, this data can be linked to your Facebook/Instagram user account by Facebook.

The Meta Platforms Ireland Limited (“Facebook”) “Lookalike Audiences” feature uses the same tracking pixel and is used by Facebook to calculate similarities with other Facebook/Instagram users and to identify new customers based on website visits and interactions. Facebook uses this to generate statistical twin/lookalike target groups in order to display targeted advertisements to these users as well.

With the Facebook Conversions API, the data is still collected in the client and processed on our web server. However, data collection with the API also takes place even when the Facebook pixel should be blocked in the client. A tracking code is then executed on the server which sends the collected events to the actual Facebook API on the Facebook servers. There, the data from the API and the data from the Facebook Pixel are merged, with the Conversion API complementing the tracking via the Facebook Pixel. For more information, please visit: https://www.facebook.com/business/help/2041148702652965?id=818859032317965.

Meta Platforms Ireland Limited and we are jointly responsible for the collection of your data when the service is integrated and the transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland Limited for the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are in particular responsible for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations in accordance with Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland Limited is responsible for enabling the rights of the data subject in accordance with articles 15-20 of the GDPR, for complying with the security requirements of article 32 of the GDPR with regard to the security of the service and for complying with the obligations under articles 33, 34 of the GDPR, insofar as a breach of personal data protection concerns Meta Platforms Ireland Limited's obligations under the joint processing agreement.

Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can find more information on the collection and use of data by Facebook, on your rights in this regard and on ways to protect your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy.

The “Facebook Custom Audiences” feature may be deactivated by logged-in users via this link and via the privacy settings in their browser.


Use of YouTube

We use YouTube plugins on our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

When you call up a website on which a video from YouTube is integrated, data is transmitted to a Google server and stored there. If you have a Google user account and are registered, Google can thereby assign the visit to your user account. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly.

We integrate content from YouTube on the websites of our Internet presence in order to make this content immediately available to you without you having to call up the content separately on YouTube. This means that you can already use functions of the social media platform YouTube on our website. This allows us to improve our offer and the user experience for you and make it more interesting. The legal basis is your consent according to Art. 6 para. 1 lit. (a) GDPR.

The data processing is carried out on the basis of Article 6(1)(f ) GDPR due to our legitimate interest in the needs-based and targeted design of the website. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out in accordance with Article 6(1)(f) GDPR. Further information on the data collected and used by YouTube and Google and your associated rights and options for protecting your privacy can be found in YouTube’s privacy policy (https://www.youtube.com/t/privacy).

If you want to prevent data transfer, you cannot use the functions of YouTube. Notwithstanding this, we recommend that you regularly log out of your user account after using a social network, but especially before activating integrated content, as you can then avoid an assignment to your profile with the respective provider.

Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy. our data may be transmitted to the USA. For the USA, no adequacy decision from the EU Commission is available. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.


Using the Amazon Partner Program

We use the "AmazonPartnerNet" partner program from Amazon EU S.a.r.l. (5 Rue Plaetis, L-2338 Luxembourg; "Amazon"). We have configured advertising on our website as links to offers on various Amazon websites. Amazon uses cookies. These cookies ensure the correct billing for the partner program. By using cookies Amazon can identify when you have clicked on an advertising link and can trace the origin of an order generated via the advertising link.

The data processing, particularly the setting of cookies, is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in measuring the success of partner advertising and thereby the correct billing of commissions as part of the partner program. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out in accordance with Article 6(1)(f) GDPR. You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. You then won’t be included in the conversion tracking statistics. The data privacy policy with detailed information on the use of the data by Amazon can be found at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.


Payment service providers

Adyen
Payments are processed by our partner (payment service provider) Adyen BV, Simon Carmiggelstraat 6 - 50, 1011 DJ Amsterdam, Netherlands. As part of the ordering process, the data you provide and the data related to your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) will be transferred to them in accordance with Art. 6 para. 1b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing by the payment service provider Adyen and only insofar as it is necessary for this purpose. Please note that, depending on the selected payment method, the related payment data will be transferred to the companies involved in the payment process. The payment service providers concerned collect and process the information required for payment processing under their own responsibility.

Use of PayPal
All PayPal transaction are covered by the PayPal Data Privacy Statement. You can found this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en.

Use of PayPal Express

Our website uses the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal").

The processing of data enables us to offer you the option of paying via the PayPal Express payment service.
To integrate this payment service, it is essential that PayPal collects, stores, and analyses data when you access the website (e.g. IP address, device type, operating system, browser type, device location). Cookies may be used for this purpose. Cookies allow your internet browser to be recognised.
The use of cookies or comparable technologies is based on § 15 para. 3 p. 1 TMG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of different payment methods. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
By selecting and using "PayPal Express", the data required for payment processing will be submitted to PayPal to execute the agreement with you using the selected payment method. The data is processed on the basis of Article 6(1)(b) GDPR.
Further information on data processing when using the Paypal Express payment service can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS in the associated data privacy policy.


DooFinder Search

In order to make visiting our website attractive and to present you better search results faster, we use the search function of doofinder. This serves to safeguard our predominantly legitimate interest in an optimized presentation of our offer in accordance with Art. 6 Para. 1 lit. f GDPR.

The operator of the site is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use the doofinder search function, the browser you are using must connect to the DooFinder servers. This gives doofinder knowledge that our website has been accessed via your IP address. Further information on the Doofinder search can be found at https://www.doofinder.com/de/ and in the doofinder data protection declaration: https://www.doofinder.com/en/privacy-policy.


Evaluations

Website logo for Google customer reviews

The website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") is integrated into our website. The integration serves to display the number and results of our reviews previously received from Google and to advertise participation in this program. In order to display the logo on our website and to show you personalised advertisements on Google, Google uses cookies. In so doing, among other things your IP address is processed and transmitted to Google. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. For more information on terms of service and privacy when using Google customer reviews, please visit https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and https://policies.google.com/privacy?hl=de.

Google customer reviews opt-in module

We use the Google Customer Reviews rating tool of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") for our website. Following your order, we would like to ask you to evaluate and comment on your purchase with us. For this reason, we will contact you via email. When doing so, we will make use of the survey-opt-in-module from Google. In the process, the following information, among others, may be processed and transmitted to Google: Order details (e.g. order ID, country of delivery, expected delivery date, GTIN of the ordered products) and your email address. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

Processing is carried out on the basis of Article 6 para. 1 lit. a GDPR with your consent, insofar as you have expressly consented to disclose your data and receive feedback requests. You can withdraw your consent at any time effective going forward without affecting the legality of the processing carried out with your consent up to the withdrawal. For more information on terms of service and privacy when using Google customer reviews, please visit https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and https://policies.google.com/privacy?hl=de.


Last update: 29.11.2023