Privacy policy

1) Information about the collection of personal data and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Rio Martina GmbH, Flughafenstr. 118, 90411 Nuremberg, Germany, phone: +49 911 3749501, email: info@riomartina.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When using our website for purely informational purposes, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited by you
Date and time of access
Amount of data sent in bytes
Referring website from which you accessed our page
Browser used
Operating system used
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured through an adequacy decision by the European Commission.

For the transfer of data to the USA, the provider relies on standard contractual clauses issued by the European Commission, which are intended to ensure compliance with the European level of data protection.

3.2 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) of the GDPR. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) of the GDPR for the performance of a contract, in accordance with Art. 6(1)(a) of the GDPR in case of your consent, or in accordance with Art. 6(1)(f) of the GDPR for the protection of our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective visit.

You can configure your browser to inform you about the setting of cookies and individually decide on their acceptance, or you can exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact us

5.1 Shopify Inbox

This website uses the live chat system provided by the following provider: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada ("Shopify").

The processing of personal data transmitted via the chat is either carried out in accordance with Art. 6(1)(b) of the GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in effectively supporting our website visitors. Your data transmitted via the chat will be deleted, subject to any conflicting legal retention periods, once the relevant matter has been finally clarified.

In addition, for the purpose of creating pseudonymized usage profiles, further information may be collected and evaluated using cookies. However, this information does not serve to personally identify you and is not combined with other data sets. If this information does contain personal references, the processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

You can prevent the setting of cookies through corresponding browser settings. However, please note that in this case, the functionality of our website may be limited. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.

We have concluded a data processing agreement with the provider, which ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties.

The provider relies on standard contractual clauses of the European Commission for the transfer of data to the USA, which are intended to ensure compliance with the European level of data protection.

Adequate data protection is ensured by an adequacy decision of the European Commission when transferring data to Canada.

5.2 Trengo

To process customer inquiries, we use the email ticketing system provided by the following provider: Trengo B.V., Burgemeester Reigerstraat 89, 3581 KP Utrecht, Netherlands.

If you contact us via email through our website, these inquiries are stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can always check the current status of the processing of your request using the individually assigned ticket number.

For the organization and processing of inquiries, personal data is collected, transmitted to the provider, stored, and accessed there, according to the extent provided, but at least including name, first name, and email address.

The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, the prompt response to your request, and the optimization of our service offering in accordance with Art. 6(1)(f) of the GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties.

5.3 In the context of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your request and only to the extent necessary.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) of the GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) of the GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified, and provided that no legal retention obligations exist.

6) Data processing when opening a customer account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this when you open a customer account. The data required to open an account can be found in the input mask of the relevant form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deleting your customer account, your data will be deleted provided that all contracts concluded about it have been fully processed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

7) Use of customer data for direct advertising

7.1 Rapidmail

The dispatch of our email newsletters is carried out through this provider: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data you provided during newsletter registration to this provider in accordance with Art. 6(1)(f) of the GDPR, so that they can handle the newsletter distribution on our behalf.

Subject to your explicit consent in accordance with Art. 6(1)(a) of the GDPR, the provider also conducts statistical analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which measure open rates and specific interactions with the newsletter content. In the process, device information (such as the time of access, IP address, browser type, and operating system) is collected and evaluated but is not merged with other databases. You can revoke your consent for newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

7.2 Email Notification for Product Availability

For temporarily unavailable items, you can sign up to receive email notifications about their availability. In this case, we will send you a one-time email notification about the availability of the respective selected item. The mandatory information for sending this notification is solely your email address. Providing additional data is voluntary and may be used to address you personally. For email delivery, we use the double opt-in procedure, which ensures that you will only receive a notification after confirming your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) of the GDPR. In this process, we store your IP address as entered by the internet service provider (ISP), as well as the date and time of registration, to be able to trace any potential misuse of your email address at a later time. The data collected during registration for our email notification service for product availability is strictly used for the intended purpose.

You can unsubscribe from availability notifications at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our dedicated distribution list unless you have expressly consented to further use of your data or we reserve the right for additional data usage that is legally permitted and will be disclosed in this statement.

8) Data processing for order processing

8.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be disclosed to the contracted transport company and the contracted financial institution in accordance with Art. 6(1)(b) of the GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact information you provided during the order (name, address, email address) to inform you personally, within the legally specified period, about upcoming updates via an appropriate communication channel (e.g., postal mail or email) in accordance with our legal obligations under Art. 6(1)(c) of the GDPR. Your contact information will be strictly used for the purpose of notifying you about updates owed by us and will be processed by us only to the extent necessary for the respective notification.

In order to process your order, we also cooperate with the following service provider(s) who support us, either in whole or in part, in the performance of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the information provided below.

8.2 Fillhub

For order processing, we use the following provider: Fillhub GmbH, Wernberger Straße 2, 93057 Regensburg, Germany.

Name, address, and, if applicable, other personal data will be disclosed to the provider solely for the purpose of processing the online order, in accordance with Art. 6(1)(b) of the GDPR. Your data will only be disclosed to the extent necessary for the actual processing of the order.

8.3 Disclosure of personal data to shipping service providers

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

In accordance with Art. 6(1)(a) of the GDPR, we will disclose your email address and/or telephone number to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or providing delivery notifications if you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery, we will only disclose the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) of the GDPR. Disclosure will only occur to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or provide delivery notifications in advance.

Consent can be revoked at any time with effect for the future, either to the responsible party mentioned above or to the provider.

8.4 Use of payment service providers

Apple Pay

If you choose the payment method "Apple Pay" provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed through the "Apple Pay" feature of your iOS, watchOS, or macOS device by charging a payment card stored in "Apple Pay." Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you need to enter a code previously set by you and verify it using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before transmitting it to the payment service provider associated with the payment card stored in Apple Pay for payment processing. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment's success.

If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) of the GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, date, and time, as well as whether the transaction was successfully completed. Anonymization completely eliminates any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."

For further information on privacy with Apple Pay, please visit the following website: https://support.apple.com/en-us/HT203027

Google Pay

If you choose the payment method "Google Pay" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed through the "Google Pay" application on your mobile device operating on at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored in Google Pay or a verified payment system (e.g., PayPal). For authorizing a payment through Google Pay exceeding €25, unlocking your mobile device is required using the respective verification method set up (e.g., face recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, will be transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website to verify a completed payment. This transaction number does not contain any information about the actual payment data of your payment methods stored in Google Pay; it is created and transmitted as a one-time valid numerical token. Google merely acts as an intermediary for processing the payment when it comes to all transactions through Google Pay. The execution of the transaction is solely between the user and the originating website, and the payment is charged to the payment method stored in Google Pay.

If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) of the GDPR.

Google reserves the right to collect, store, and analyze specific transaction-related information for each transaction made through Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the transaction's purpose, and potentially the offer associated with the transaction.

According to Google, this processing is carried out solely based on the legitimate interest in proper invoicing, transaction data verification, and the optimization and maintenance of the Google Pay service, pursuant to Art. 6(1)(f) of the GDPR.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google through the use of other Google services.

The terms of use for Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en For further information on privacy with Google Pay, please visit the following website: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

Klarna

On this website, one or more online payment methods from the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When selecting a payment method where you make a payment in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) will be disclosed to the provider according to Art. 6(1)(b) of the GDPR. The disclosure of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

When selecting a payment method where the provider makes the payment in advance (e.g., invoice purchase, installment or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, data on an alternative payment method) during the ordering process.

To safeguard our legitimate interest in determining the solvency of our customers, we will transmit this data to the provider for the purpose of a credit check, according to Art. 6(1)(f) of the GDPR. Based on the personal data you provided and additional data (such as shopping cart, invoice amount, order history, payment experiences), the provider will assess whether the payment option selected by you can be granted with regard to payment and/or default risks.

For the decision within the scope of the application review, identity and credit information from the following credit reference agencies may also be included, in addition to provider-internal criteria, in accordance with Art. 6(1)(f) of the GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit check may include probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other factors, are taken into account in the calculation of the score values.

You can object to the processing of your data at any time by sending us a message or notifying the provider directly. However, the provider may still be entitled to process your personal data if this is necessary for the proper processing of the payment according to the contract.

Paypal

On this website, one or more online payment methods provided by the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method provided by the provider where you make a prepayment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6(1)(b) of the GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you choose a payment method where we make a prepayment, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative payment method) during the ordering process.

To safeguard our legitimate interest in determining your ability to pay in such cases, we will transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) of the GDPR. The provider will assess whether the selected payment method can be granted based on the personal data you provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences), in terms of payment and/or default risk.

The credit information may include probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is taken into account in the calculation of score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to process your personal data if this is necessary for the contractual processing of payments.

Paypal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal that consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, we will transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for the purpose of payment processing. The disclosure is made in accordance with Art. 6(1)(b) of the GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transmitted to credit agencies by PayPal, if applicable, in accordance with Art. 6(1)(f) of the GDPR, based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is taken into account in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to process your personal data if this is necessary for the contractual processing of payments.

If you choose the PayPal payment method "Invoice," your payment data will be transmitted to PayPal for the purpose of payment preparation, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis is Art. 6(1)(b) of the GDPR. In this case, RatePay conducts an identity and credit check in its own name to determine your ability to pay, in accordance with the principle mentioned above, and, based on its legitimate interest in determining your ability to pay in accordance with Art. 6(1)(f) of the GDPR, transmits your payment data to credit agencies. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment provider, your payment data will be transmitted to PayPal for payment preparation in accordance with Art. 6(1)(b) of the GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the respective provider for payment processing in accordance with Art. 6(1)(b) of the GDPR:

Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)
bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Shopify Payments

On this website, one or more online payment methods provided by the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you choose a payment method provided by the provider where you make a prepayment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6(1)(b) of the GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

9) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files stored on your computer, to analyze your use of the website. In addition, Google AdSense uses web beacons (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to and stored on a Google server. This may also involve the transfer of data to Google LLC servers in the United States.

Google uses the information obtained to evaluate your usage behavior in relation to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on behalf of Google. All the processing described above, including the reading of information on the device used through cookies and/or web beacons, is only carried out if you have given us your express consent in accordance with Art. 6(1)(a) of the GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

You can view Google's privacy policy here: https://www.google.com/policies/privacy/.

10) Web analytics services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for an analysis of your usage of our website.

By default, Google Analytics 4 does not use cookies when you visit the website unless you explicitly consent to them. Instead, information about your usage behavior is collected and processed through pings (small data packets sent to the host of an end device). This information includes your IP address, which is truncated by Google to exclude direct identification of individuals.

The information is transmitted to and processed on Google servers. Transfers to Google LLC servers in the United States are also possible. Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted and truncated by your browser as part of Google Analytics is not merged with other Google data. The data collected through Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, including the transmission of data through pings and the potential use of Google Analytics cookies, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right to revoke, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of data of our website visitors and prohibits unauthorized disclosure to third parties. For the transfer of data to the United States, Google relies on the standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. Further legal information on Google Analytics 4, including a copy of the mentioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features Google Analytics 4 utilizes the special function of "demographic features" and can create statistics that provide insights into the age, gender, and interests of website visitors. This is done through the analysis of advertisements and information from third-party sources. Target audiences for marketing activities can be identified through this process. However, the collected data cannot be attributed to any specific individual and is deleted after a storage period of two months.

Google Signals As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, subject to your consent to use Google Analytics under Art. 6(1)(a) of the GDPR, Google can analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personally identifiable data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en. Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6(1)(a) of the GDPR, have created an account on this website, and logged in to that account on different devices, your activities, including conversions, can be analyzed across devices.

10.2 Polyfill

This website utilizes the service of the following provider: The Financial Times Ltd., Bracken House, 1 Friday Street, London, England, EC4M 9BT.

The service installs a script on our website that enables high-quality rendering of content on older browser versions by providing and transmitting polyfill files during the browser request to bridge missing browser functionalities. For this purpose, certain technical information such as browser details and connection data, including your IP address, is automatically transmitted to the provider in an anonymized form.

The information is used to determine which polyfill files are needed by your browser for the proper display of page content.

If personal data is processed in this context, the processing is based on our legitimate interests in optimizing the presentation of our website and enhancing the user experience in accordance with Art. 6(1)(f) of the GDPR.

When transferring data to the provider's location, an adequate level of data protection is ensured through an adequacy decision by the European Commission.

10.3 Google Tag Manager

This website utilizes "Google Tag Manager," a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and allows for their calibration, control, and conditional execution through a unified user interface. The Google Tag Manager itself does not store any information on user devices or retrieve such information. The service does not perform independent data analyses. However, when a page is accessed, your IP address is transmitted to Google through the Google Tag Manager and may be stored there. Transfers to servers of Google LLC in the United States are also possible.

This processing is carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. Without your consent, Google Tag Manager will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right to revoke, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the United States, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Retargeting / Remarketing and Conversion-Tracking

11.1 Facebook Pixel for creating Custom Audiences with enhanced data matching (with Cookie Consent Tool)

Within our online offering, we use the "Facebook Pixel" service in the mode of enhanced data matching provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

When a user clicks on an advertisement we have placed on Facebook, the "Facebook Pixel" extends the URL of our linked page with a parameter. After the redirection, this URL parameter is then entered into the user's browser through a cookie set by our linked page itself. Additionally, this cookie captures specific customer data, such as the email address we collect on our website linked to the Facebook ad during activities like purchases, account logins, or registrations (enhanced data matching). The cookie is then read and allows for the transmission of data, including the specific customer data, to Facebook.

We use "Facebook Pixel" with enhanced data matching to make our Facebook advertisements (known as "Facebook Ads") more effective and to ensure that they correspond to users' interests or exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited websites), which we transmit to Facebook (known as "Custom Audiences").

Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Facebook Pixel," the enhanced data matching feature helps us measure the effectiveness of our advertising campaigns better by capturing more associated conversions.

All transmitted data is stored and processed by Facebook, allowing for association with the respective user profile, and Facebook may use the data for its own advertising purposes. The data can enable Facebook and its partners to display ads on and off Facebook.

All the processing described above, especially the setting of cookies to retrieve information on the used device, is carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with effect for the future by disabling this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.

The information generated by Facebook is usually transmitted to and stored on a server operated by Facebook. In this context, there may also be a transfer to servers of Meta Platforms Inc. in the United States.

11.2 Google Ads Remarketing

Our website uses the features of Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in your browser that enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. Further data processing will only take place if you have consented to Google linking your Internet and app browser history with your Google account and using information from your Google account to personalize ads that you view on the web. If you are logged into your Google account while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data to create target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the United States.

For details on the processing triggered by Google Ads Remarketing and Google's handling of website data, please see: https://policies.google.com/technologies/partner-sites

You can permanently opt-out of the setting of cookies by Google Ads Remarketing by downloading and installing the browser plugin available at the following link: https://support.google.com/ads/answer/7395996?

For further information and the privacy policy regarding advertising and Google, you can visit: https://www.google.com/policies/technologies/ads/

11.3 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to advertise our attractive offers on external websites using advertising materials (called Google Adwords). We can determine the success of individual advertising campaigns based on the campaign data. Our aim is to show you advertisements that are relevant to your interests, make our website more interesting for you, and achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Google Ads customers' websites. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the United States.

For details on the processing triggered by Google Ads Conversion Tracking and Google's handling of website data, please see: https://policies.google.com/technologies/partner-sites

Furthermore, you can permanently opt-out of the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may be limited if you have disabled the use of cookies. You can view Google's privacy policy here: https://www.google.com/policies/privacy/

12) Page functionalities

12.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC., USA.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In the process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started using the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to our site, your data will be directly associated with your account when you click on a video. If you do not want this association with your account, you must log out before activating the playback button.

For data transfers to the USA, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

12.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. By using this service, our location will be displayed to you, making it easier to find directions.

When accessing the pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google's servers, and this may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether you have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation are carried out in accordance with Art. 6(1)(f) of the GDPR (General Data Protection Regulation) based on Google's legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet users' needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google as part of using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps and thus the map display on this website cannot be used in that case.

Where legally required, we have obtained your consent in accordance with Art. 6(1)(a) of the GDPR for the processing of your data as described above. You can revoke your consent at any time, with effect for the future. To exercise your right to revoke, please follow the option to object as described above.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on a European Commission adequacy decision.

12.3 Google Web Fonts

This site uses web fonts provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you visit a page, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In the process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA.

The processing of personal data in the course of establishing a connection with the provider of the web fonts is carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with effect for the future by disabling this service using the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used from your computer.

For data transfers to the USA, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

12.4 hCaptcha

On this website, we use the CAPTCHA service provided by the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.

The service checks whether an input is made by a natural person or is being abused through machine and automated processing. It blocks spam, DDoS attacks, and similar automated harmful accesses. To ensure that an action is taken by a human and not an automated bot, the provider collects the IP address of the used device, detection data of the used browser and operating system type, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation.

The legal basis for this is our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR (General Data Protection Regulation).

We have concluded a data processing agreement with the provider to ensure the protection of data of our website visitors and to prohibit unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

13) Tools and Miscellaneous

13.1 DATEV

For the completion of accounting tasks, we utilize the cloud-based accounting software service provided by the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.

The provider processes incoming and outgoing invoices, as well as potentially our company's banking transactions, in order to automatically capture invoices, match them to transactions, and generate the financial accounting through a partially automated process.

If personal data is processed in this context, the processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in an efficient organization and documentation of our business transactions.

13.2 Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is presented to users as an interactive user interface upon page access, allowing them to provide consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. By using the tool, all consent-required cookies/services are only loaded if the respective user has given their consent by checking the boxes. This ensures that such cookies are only set on the user's respective device in the event of granted consent.

The tool uses technically necessary cookies to store your cookie preferences. In general, personal user data is not processed in this context.

However, in individual cases, personal data may be processed (such as IP address) for the purpose of storing, assigning, or logging cookie settings. In such cases, the processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies, and therefore, in a legally compliant design of our website.

Furthermore, the processing is also based on Art. 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of technically non-essential cookies dependent on the respective user's consent.

If necessary, we have concluded a data processing agreement with the provider to ensure the protection of data of our website visitors and to prohibit unauthorized disclosure to third parties.

For further information about the operator and the settings options of the Cookie Consent Tool, please refer directly to the corresponding user interface on our website.

14) Rights of the person concerned

14.1 The applicable data protection law grants you the following rights as a data subject (rights to information and intervention), with reference to the legal basis indicated for each exercise requirement:

Right to information according to Art. 15 of the GDPR;
Right to rectification according to Art. 16 of the GDPR;
Right to erasure ("right to be forgotten") according to Art. 17 of the GDPR;
Right to restriction of processing according to Art. 18 of the GDPR;
Right to notification according to Art. 19 of the GDPR;
Right to data portability according to Art. 20 of the GDPR;
Right to withdraw consent granted according to Art. 7(3) of the GDPR;
Right to lodge a complaint with a supervisory authority according to Art. 77 of the GDPR.

14.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, the relevant statutory retention periods (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6(1)(a) of the GDPR, the data in question will be stored until you revoke your consent.

If there are statutory retention periods for data processed in the context of contractual or similar obligations based on Art. 6(1)(b) of the GDPR, these data will be routinely deleted after the retention periods have expired, provided they are no longer necessary for contract fulfillment or initiation and/or there is no legitimate interest on our part to continue storing them.

When processing personal data based on Art. 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object under Art. 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object under Art. 21(2) of the GDPR.

Unless otherwise stated in the other information provided in this statement regarding specific processing situations, stored personal data will generally be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Language