privacy policy

1. Data protection at a glance

General information
The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data means any data that can identify you personally. Detailed information on data protection is provided in the privacy policy below.

Data collection on this website
‍
Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You can find the operator's contact details in the section ‘Information about the controller’ in this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include information you enter in a contact form, for example.

Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This mainly includes technical data such as your internet browser, operating system and the time of the page visit. This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some data is collected to ensure that the website works correctly. Other data may be used to analyse your usage behaviour.

What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to request rectification, blocking or erasure of this data. You can contact us at any time at the address given in the legal notice about these rights or other data protection questions. You also have the right to lodge a complaint with the competent supervisory authority.

Analytics tools and third-party tools
When you visit our website, your browsing behaviour may be analysed statistically. This mainly takes place using cookies and analytics programmes. Analysis of your browsing behaviour is generally anonymous and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Details are provided in the privacy policy below.
You can object to this analysis. This privacy policy explains the options available to you.

2. General information and mandatory disclosures

Privacy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy. Various personal data is collected when you use this website. Personal data means data that can identify you personally. This privacy policy explains what data we collect, what we use it for, and how and why this happens. Please note that data transmission over the internet, such as email communication, may have security vulnerabilities. Complete protection against third-party access is not possible.

Information about the controller
The controller responsible for data processing on this website is:
‍
Eistechnikcenter GmbH
Jüterboger Str. 31 A
14943 Luckenwalde
‍
Represented by: Hadi Assaf and Samir Assaf
‍
Phone: +49 33 716 897 940
Email: info@eistechnikcenter.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.‍

Right to data portability
You have the right to receive, or have a third party receive, data that we process automatically on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will be done only where technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address changes from ‘http://’ to ‘https://’ and a padlock symbol appears in the address bar. When SSL or TLS encryption is enabled, the data you send us cannot be read by third parties.

Access, blocking and erasure
Under applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of processing. Where applicable, you also have the right to rectification, blocking or erasure. You can contact us at any time at the address given in the legal notice about these rights or other questions concerning personal data.

Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice. This right applies in the following cases:

• If you dispute the accuracy of personal data we hold about you, we generally need time to verify it. During verification, you have the right to request restriction of the processing of your personal data.
• If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.
• If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of erasure.
• If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it is established whose interests prevail, you have the right to request restriction of the processing of your personal data.

Once processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Information about transfers to the USA and other third countries

Among other tools, we use tools from companies based in third countries that are not considered safe under data protection law, and US tools whose providers are not certified under the EU–US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in those countries.
Please note that a level of data protection comparable to that in the EU cannot be guaranteed in third countries considered unsafe under data protection law. As a safe third country, the USA generally provides a level of data protection comparable to that in the EU. Transfers to the USA are therefore permitted if the recipient is certified under the EU–US Data Privacy Framework (DPF) or has suitable additional safeguards. This privacy policy provides information about transfers to third countries, including the recipients.

Objection to advertising emails
‍
We hereby object to the use of contact details published as part of the mandatory legal notice for sending advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

3. Hosting

We host our website content with the following provider:

Webflow
‍The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (‘Webflow’). When you visit our website, Webflow collects various log files, including your IP addresses.
‍
Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies required to display the website, provide certain functions and ensure security (necessary cookies).
‍
For details, see Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
‍
Webflow is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in displaying our website as reliably as possible. Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
‍
Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://webflow.com/legal/eu-privacy-policy.
‍
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/6365.

Processing on our behalf
We have concluded a data processing agreement for the use of the above service. This legally required agreement ensures that the provider processes our website visitors' personal data only on our instructions and in compliance with the GDPR.

4. Data collection on our website

Cookies
‍Our websites use cookies. Cookies are small data packages that do not damage your device. They are stored either temporarily for a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically after your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies may originate from us (first-party cookies) or third-party companies (third-party cookies). Third-party cookies enable services from other companies to be integrated into websites, such as cookies used to process payment services.

Cookies have various functions. Many are technically necessary because certain website functions, such as the shopping cart or video display, would not work without them. Other cookies may be used to analyse user behaviour or for advertising.

Cookies required for electronic communication, to provide functions you request, such as the shopping cart, or to optimise the website, such as audience measurement cookies (necessary cookies), are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide technically correct and optimised services. Where consent to storing cookies and similar recognition technologies has been requested, processing takes place exclusively on that basis (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject them in certain cases or generally, and delete them automatically when the browser closes. Disabling cookies may limit this website's functionality.

This privacy policy explains which cookies and services are used on this website.

Server log files
The website provider automatically collects and stores information in server log files that your browser transmits to us automatically. This includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources. It is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in technically correct presentation and optimisation of its website, which requires server log files to be collected.

Contact form
‍If you send us an enquiry using the contact form, we store the information provided, including your contact details, to process the enquiry and any follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where requested. Consent may be withdrawn at any time.

The data you enter in the contact form remains with us until you request its deletion, withdraw your consent to storage or the purpose of storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax
‍If you send us an enquiry using the contact form, we store the information provided, including your contact details, to process the enquiry and any follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where requested. Consent may be withdrawn at any time.

The data you enter in the contact form remains with us until you request its deletion, withdraw your consent to storage or the purpose of storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Newsletter
‍If you would like to receive the newsletter offered on this website, we need your email address and information allowing us to verify that you own that address and agree to receive the newsletter. No additional data is collected, except on a voluntary basis.
‍
We use this data solely to send the requested information and do not pass it to third parties. Data entered in the newsletter registration form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to storage of the data and email address and their use for sending the newsletter at any time, for example via the unsubscribe link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out. Data you provide for receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe and is deleted from the mailing list after unsubscription or when the purpose no longer applies. We reserve the right, at our discretion, to delete or block email addresses from our mailing list within the scope of our legitimate interest under Article 6(1)(f) GDPR. Data stored for other purposes remains unaffected.


After you unsubscribe, your email address may be stored in a blacklist by us or the newsletter service provider where necessary to prevent future mailings. Blacklist data is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters, a legitimate interest under Article 6(1)(f) GDPR. Blacklist storage has no time limit. You may object to storage if your interests outweigh our legitimate interest.

5. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
‍
Google Tag Manager allows us to integrate tracking and statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or perform its own analyses. It only manages and deploys the tools integrated through it. However, it collects your IP address, which may also be transferred to Google's parent company in the United States.

Google Tag Manager is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on its website. Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
‍
Google Analytics allows the website operator to analyse visitor behaviour. The operator receives usage data such as page views, visit duration, operating systems used and user origin. This data is combined under a user ID and assigned to the visitor's device.

Google Analytics also allows us to record mouse movements, scrolling and clicks. It uses various modelling approaches to supplement collected data and machine learning technologies to analyse it.

Google Analytics uses technologies such as cookies or device fingerprinting to recognise users for the purpose of analysing behaviour. Information collected by Google about use of this website is generally transferred to and stored on a Google server in the USA. This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation
‍Google Analytics IP anonymisation is enabled. Google therefore truncates your IP address within EU Member States or other states party to the Agreement on the European Economic Area before transferring it to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of this website's operator, Google uses this information to evaluate your website use, compile reports on website activity and provide other services relating to website and internet use. The IP address transmitted by your browser through Google Analytics is not combined with other Google data.

Browser plugin
You can prevent cookies from being stored by adjusting your browser settings, although you may then be unable to use all website functions fully. You can also prevent Google from collecting and processing data generated by cookies about your website use, including your IP address, by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de.

Objecting to data collection
‍You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent collection during future visits to this website: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google's privacy information: https://support.google.com/analytics/answer/6004245?hl=de.

Processing on our behalf
‍We have concluded a data processing agreement with Google and fully implement the German data protection authorities' strict requirements when using Google Analytics.

Demographic features in Google Analytics
‍This website uses Google Analytics' demographic features, which allow reports about visitors' age, gender and interests. This data comes from Google's interest-based advertising and third-party visitor data. It cannot be assigned to a specific person. You can disable this feature at any time in your Google account's advertising settings or prevent Google Analytics from collecting your data generally as described under ‘Objecting to data collection’.

Google Ads
‍The website operator uses Google Ads, an online advertising programme provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in Google's search engine or on third-party websites when users enter certain search terms (keyword targeting). Targeted advertisements can also be displayed using user data held by Google, such as location and interests (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms triggered our advertisements and how many advertisements resulted in clicks.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780

Google AdSense
‍This website uses Google AdSense, a service for displaying advertisements. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense allows us to display targeted advertisements from third-party companies on our website. Advertising content is based on your interests, which Google determines from your previous usage behaviour. Contextual information, such as your location, the content of the website visited and your Google search terms, is also considered when selecting relevant advertisements.

Google AdSense uses cookies, web beacons (invisible graphics) and similar recognition technologies. These allow information such as traffic on these pages to be analysed.

Information collected by Google AdSense about use of this website, including your IP address, and the delivery of advertising formats is transferred to and stored on a Google server in the USA. Google may pass this information to its contractual partners. However, Google will not combine your IP address with other data stored about you.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://privacy.google.com/businesses/controllerterms/mccs/. The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing
‍This website uses Google Ads Remarketing features. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing allows us to assign people who interact with our online offering to specific audiences and subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting).

Advertising audiences created with Google Ads Remarketing can also be linked to Google's cross-device features. This allows personalised, interest-based advertising tailored to your previous usage and browsing behaviour on one device, such as a mobile phone, to be displayed on another device, such as a tablet or computer.

If you have a Google account, you can object to personalised advertising at: https://adssettings.google.com/anonymous?hl=de.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Further information and Google's privacy provisions are available at: https://policies.google.com/technologies/ads?hl=de.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

Audience creation using Customer Match
‍We use Google Ads Remarketing's Customer Match feature, among other methods, to create audiences. We provide Google with certain customer data, such as email addresses, from our customer lists. If those customers use Google and are logged into their Google accounts, relevant advertisements are displayed to them within the Google network, such as on YouTube, Gmail or in the search engine.

Google conversion tracking
‍This website uses Google conversion tracking. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google conversion tracking allows Google and us to determine whether users have performed certain actions. For example, we can analyse how often buttons on our website are clicked and which products are viewed or purchased most frequently. This information is used to compile conversion statistics. We learn the total number of users who clicked our advertisements and what actions they performed. We do not receive information that allows us to identify users personally. Google itself uses cookies or similar recognition technologies for identification.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

For more information about Google conversion tracking, see Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

Meta Pixel
‍This website uses Meta's visitor action pixel to measure conversions. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the collected data is also transferred to the USA and other third countries.

This allows visitor behaviour to be tracked after users are redirected to the provider's website by clicking a Meta advertisement. The effectiveness of Meta advertisements can then be evaluated for statistical and market research purposes and future advertising optimised.

The collected data is anonymous to us as the website operator; we cannot identify users. However, Meta stores and processes the data, allowing it to be linked to the relevant Facebook or Instagram profile. Meta may use the data for its own advertising purposes in accordance with its data policy (https://de-de.facebook.com/about/privacy/). This enables Meta to display advertisements on Facebook, Instagram and other advertising channels. We, as the website operator, have no control over this use of the data.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

We use the advanced matching feature within Meta Pixel.

Advanced matching allows us to transmit to Meta various types of data collected through our website about customers and prospective customers, such as place of residence, state, postcode, hashed email addresses, names, gender, date of birth or phone number. This helps us tailor Facebook and Instagram advertising more precisely to people interested in our offering. It also improves website conversion attribution and expands Custom Audiences.

Where the tool described here collects personal data on our website and forwards it to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this processing under Article 26 GDPR. Joint responsibility is limited exclusively to collection of the data and its transfer to Meta. Subsequent processing by Meta is not part of the joint responsibility. Our shared obligations are set out in a joint processing agreement, available at https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy information when using the Meta tool and for implementing it on our website in compliance with data protection law. Meta is responsible for the security of its products. You may exercise rights relating to data processed by Facebook or Instagram, such as access requests, directly with Meta. If you exercise those rights with us, we are obliged to forward them to Meta.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Meta's privacy information provides further details on protecting your privacy: https://de-de.facebook.com/about/privacy/.

You can also disable the Custom Audiences remarketing feature in the advertising settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged into Facebook to do so.

If you do not have a Facebook or Instagram account, you can disable Meta's interest-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/4452.

Meta Conversion API
‍We have integrated the Meta Conversion API into this website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the collected data is also transferred to the USA and other third countries.

The Meta Conversion API allows us to record website visitors' interactions with our website and pass them to Meta to improve advertising performance on Facebook and Instagram.

In particular, this records the time of access, the page visited, your IP address and user agent, and potentially other specific data, such as products purchased, cart value and currency. A full overview of the data that can be collected is available at https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where the tool described here collects personal data on our website and forwards it to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this processing under Article 26 GDPR. Joint responsibility is limited exclusively to collection of the data and its transfer to Meta. Subsequent processing by Meta is not part of the joint responsibility. Our shared obligations are set out in a joint processing agreement, available at https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy information when using the Meta tool and for implementing it on our website in compliance with data protection law. Meta is responsible for the security of its products. You may exercise rights relating to data processed by Facebook or Instagram, such as access requests, directly with Meta. If you exercise those rights with us, we are obliged to forward them to Meta.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Meta's privacy information provides further details on protecting your privacy: https://de-de.facebook.com/about/privacy/.
‍
You can also disable the Custom Audiences remarketing feature in the advertising settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged into Facebook to do so.

If you do not have a Facebook or Instagram account, you can disable Meta's interest-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/4452.

Meta Custom Audiences
‍We use Meta Custom Audiences. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, use our free or paid offerings, provide data to us or interact with our company's Facebook or Instagram content, we collect your personal data. If you consent to Meta Custom Audiences, we transfer this data to Meta so it can display relevant advertising to you. Your data can also be used to define audiences (lookalike audiences).

Meta processes this data on our behalf. Details are provided in Meta's terms of use: https://www.facebook.com/legal/terms/customaudience.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details are available here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/4452.

Processing on our behalf
‍We have concluded a data processing agreement for the use of the above service. This legally required agreement ensures that the provider processes our website visitors' personal data only on our instructions and in compliance with the GDPR.

6. Plugins and tools

YouTube with enhanced privacy
This website embeds YouTube videos. The website operator is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page containing YouTube content, a connection is established to YouTube's servers. The YouTube server is informed which of our pages you visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube's privacy-enhanced mode. According to YouTube, videos played in this mode are not used to personalise browsing on YouTube. Advertisements displayed in privacy-enhanced mode are also not personalised. No cookies are set in this mode. Instead, local storage elements are stored in the user's browser. Like cookies, these may contain personal data and be used for recognition. Details about privacy-enhanced mode are available at: https://support.google.com/youtube/answer/171780.

Activating a YouTube video may trigger further data processing over which we have no control.

We use YouTube to present our online offering attractively, which constitutes a legitimate interest under Article 6(1)(f) GDPR. Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time. Further information about data protection at YouTube is available in its privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts (local hosting)
This website uses Google Fonts, provided by Google, to display fonts consistently. The fonts are installed locally. No connection to Google's servers is established.
Further information about Google Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

Google reCAPTCHA
‍We use Google reCAPTCHA (‘reCAPTCHA’) on this website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entered on this website, such as in a contact form, is provided by a person or an automated programme. It analyses website visitor behaviour using various characteristics. Analysis begins automatically as soon as the visitor enters the website. reCAPTCHA evaluates information such as IP address, time spent on the website and mouse movements. Data collected during analysis is forwarded to Google.

reCAPTCHA analyses take place entirely in the background. Visitors are not notified that analysis is occurring.

Data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website from abusive automated access and spam. Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about Google reCAPTCHA is available in Google's privacy policy and terms of service at: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF-certified company undertakes to comply with these standards. The provider supplies further information at: https://www.dataprivacyframework.gov/participant/5780.

7. E-commerce and payment providers

Processing customer and contract data
We collect, process and use personal customer and contract data to establish, define and amend our contractual relationships. We collect, process and use personal data about use of this website (usage data) only where necessary to enable the user to access the service or to bill for it. The legal basis is Article 6(1)(b) GDPR.

Customer data is deleted after completion of the order or termination of the business relationship and expiry of any applicable statutory retention periods. Statutory retention periods remain unaffected.

Data transfers when concluding contracts for services and digital content
We transfer personal data to third parties only where necessary to perform the contract, for example to the financial institution responsible for processing payment.

No further transfer occurs unless you have expressly consented to it. Your data is not passed to third parties without express consent, for example for advertising purposes.

Processing is based on Article 6(1)(b) GDPR, which permits processing to perform a contract or take pre-contractual measures.

Shopify backend
‍We use Shopify as a headless e-commerce platform for our online shop. The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is transferred to Shopify when you visit our shop and place orders. During checkout, you are redirected to Shopify's infrastructure.

When you place an order, Shopify collects:

• Name
• Email address
• Postal address
• Phone number (optional)
• Payment details
• Order history

The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract). We have concluded a data processing agreement with Shopify under Article 28 GDPR.
Further information: https://www.shopify.de/legal/datenschutz

Shopyflow integration
‍We use Shopyflow to connect Webflow and Shopify. The provider is Funf Digital Design Studio, LDA (trading as Shopyflow), Portugal.

Shopyflow connects the two systems and enables their integration. The following data transfers take place:

• Product data transferred from Shopify for display in Webflow
• Cart data forwarded from Webflow to Shopify
• Real-time inventory synchronisation
• A customer portal providing access to customer data

Shopyflow does not store your data permanently; it retrieves it from Shopify when required.

Processed data includes:

• Technical information (IP address, browser)
• Cart information
• User interactions
• Email address (during registration or login)
• Order data
• Customer data from Shopify

Shopyflow is divided into:
Shopyflow Functionality: essential for basic functions (Article 6(1)(b) GDPR)
Shopyflow Tracking: for analysis and optimisation (Article 6(1)(a) GDPR)

Servers are located in the EU (Ireland) and the USA. Data transfers to the USA are based on Standard Contractual Clauses.
Further information: https://www.shopyflow.com/privacy