Data Protection Declaration

 

1. Information on the collection of personal data and contact details of the person responsible.

1.1 In the following, we inform you about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In this way, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular from the EU General Data Protection Regulation (DSGVO).

1.2 Responsible according to Art. 4 para. 7 DSGVO for the data processing on this website is
Beurer Europe GmbH, Söflinger Strasse 218, 89077 Ulm, Duitsland, tel.: +49 (731) 3989-0, fax: +49 (731) 3989-139, e-mail: imprint@beurer.de.

1.3 The data controller has appointed a data protection officer. He can be reached as follows:
Data Protection Officer Beurer GmbH Söflinger Strasse 218 89077 Ulm, Duitsland Tel.: +49 (0)731-3989-0 E-mail: datenschutz@beurer.de
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

1.4 When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context, if the inquiry is assigned to a contract, after the time limits for the term of the contract, otherwise after the storage is no longer necessary, or restrict the processing if there are statutory retention obligations exist.

1.5 If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below.

 

2. Your rights

2.1 You have the following rights vis-à-vis a data controller with regard to personal data concerning you:

- Right of information,

- Right to rectification or erasure,

- Right to restriction of processing,

- Right to object to processing,

- Right to data portability.

2.2 Sie haben zudem das Recht, sich bei einer Datenschutz-Aufsichtsbehörde über die Verarbeitung Ihrer personenbezogenen Daten durch uns zu beschweren.

 

3. Data collection when visiting our website

During the informational use of the website, i.e. the mere viewing without registration and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 p. 1 lit. DSGVO:

- Date and time at the time of access

- Amount of data transferred in bytes

- Source/ referrer from which you reached the page

- Browser used

- Operating system used

- Domain and IP address used (if applicable: in anonymized form)

- Time zone difference to Greenwich Mean Time (GMT)

- Content of the request (page visited)

- Access status/HTTP status code

- Language and version of browser software

The processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. The data is stored for 7 days.

 

4. Other functions and offers of our website

4.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other usual functions to analyze or market our offers, which are presented in more detail below. For this purpose, you usually have to provide further personal data or we process such further data that we use to perform the respective services. For all data processing purposes described here, the aforementioned data processing principles apply.

4.2 In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly monitored.

4.3 Furthermore, we may pass on your personal data to third parties if participation in promotions, competitions, conclusion of contracts or similar services are offered by us together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You will receive more information when providing your data or below in the description of the respective offers.

4.4 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

 

5. Objection to the processing of your data or revocation of consent

5.1 If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.

5.2 Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we have carried out. In the event of your objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

5.3 Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. The best way to exercise your advertising objection is to contact us using the contact details provided above.

 

6. Cookies

6.1 In addition to the above data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your terminal device. When you call up our website and at any time later, you have the choice of whether you generally permit the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical point of view (6.2), before going into more detail about your individual choices by describing technically necessary cookies (6.3) and cookies that you can voluntarily select or deselect (6.4).

6.2 Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:

- Transient cookies: Such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognized when you return to our website.

- Persistent cookies: Such cookies are automatically deleted after a specified duration, which is set differently depending on the cookie. You can view the cookies set and the durations at any time in the settings of your browser and delete the cookies manually.

- Other technologies: These features do not rely on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects, or an analysis of your browser settings. The result is likewise that we can use the techniques described below. Here, too, you can of course consent or object.

6.3 Mandatory functions that are technically necessary to display the website: The technical structure of the website requires that we use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DSGVO.

6.4 Optional cookies when you give your consent: We set various cookies only after your consent, which you can select during your first visit to our website via the so-called cookie consent tool. The functions are only activated in the event of your consent and may serve in particular to enable us to analyze and improve visits to our website, to make it easier for you to use it via different browsers or terminal devices, to recognize you when you visit, or to serve advertising (possibly also to orient advertising to interests, to measure the effectiveness of ads, or to show interest-oriented advertising). The legal basis for this processing is Art. 6 para. 1 p. 1 lit. a DSGVO. The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

The functions we use, which you can select and revoke individually via the Consent Manager, are described below. Please note that if you do not accept cookies, the functionality of our website may be limited.

 

7. Other services and functions used on this website

7.1 Data processing when opening a customer account

Pursuant to Art. 6 (1) lit. b DSGVO, personal data will be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. Which data is required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

7.2 Hosting by Shopify

We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf.

Shopify also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.

As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, shopify uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, shopify undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

For more information on the standard contractual clauses and on the data processed through the use of shopify, please refer to the Privacy Policy at https://www.shopify.de/legal/datenschutz and https://help.shopify.com/en/manual/your-account/privacy/GDPR/gdpr-faq#will-shopify-sign-standard-contractual-clauses, respectively.

7.3 Heroku

We use Heroku for our website. This is a container-based cloud platform to develop and deploy web applications on it. The service provider is the American company salesforce.com Inc, One Market Street, Suite 300, San Francisco, CA 94105, USA.

Salesforce also processes data from you in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of the data processing.

Salesforce uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Salesforce undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

The data processing terms and conditions (Data Processing Addendum), which correspond to the standard contractual clauses, can be found at https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

You can learn more about the data processed through the use of Salesforce in the Privacy Policy at https://www.salesforce.com/en/company/privacy/.

7.4 Scaleway

We use an Internet service provider to maintain our online presence with regard to the subdomain data.beurer.com, on whose server the website is stored and which makes our site available on the Internet. The following data is collected in this process:

- Information about the browser type and version used

- The operating system of the user

- The user's Internet service provider

- The IP address of the user

- Date and time of access

- Websites from which the user's system accesses our website

- Websites that are accessed by the user's system via our website

The data is stored in log files at our technical service provider, SCALEWAY SAS, 8 rue de la Ville l'Evêque, 75008 Paris/France. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO

The storage of the above data in the log files is done to ensure the functionality of our website. In addition, this data serves us to optimize the website and to ensure the security of our information technology systems (e.g. attack detection). These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Log files are stored for seven days.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO. If you only use our website for informational purposes, our internet service provider only collects the personal data that the browser you use transmits to its server. The data is stored as log files on the servers of our Internet service provider. This is necessary in order to be able to display the website on the end device you are using, as well as to ensure stability and security. Our legitimate interest in data processing lies in the aforementioned purposes. Legal basis: The data processing is based on our legitimate interest in the efficient and secure provision of our website, Art. 6 para. 1 lit. f) DSGVO. Duration: The above data for the provision of our website will be stored for some time and then deleted.

7.5 Integration of the Trusted Shops trust badge

The Trusted Shops trust badge is integrated on our website to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order.

This serves to protect our legitimate interests in an optimal marketing of our offer, which prevail in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

7.6 Audiocare

deleted

7.7 PayPal

We use the online payment service PayPal on our website. The service provider is the American company PayPal Inc. The company PayPal Europe (S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal")) is responsible for the European region. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

PayPal also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the legality and security of data processing. As a basis for data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, thus especially in the USA) or a data transfer there, PayPal uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, PayPal undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

For more information about the standard contractual clauses and about the data processed through the use of PayPal, please see the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-ful

7.8 Shopify Payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy.

Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

7.9 Google Tag Manager

We use the service called Google Tag Manager from Google. "Google" is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.

We have concluded an order processing agreement with Google. The Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data.

For more information on the Google Tag Manager, please refer to Google's privacy policy.

Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.

7.10 Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

The data processing is based on your consent given with the help of the Consent Tool in accordance with Art. 6 para. 1 lit. a DSGVO.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

7.11 Use of Salesforce Service Cloud and Marketing Cloud

Data that you provide to us via our website (e.g. in forms for purchase, newsletter registration, as part of a competition) is stored in the Salesforce Service Cloud and used to send order confirmations and shipment notices.

For sending our newsletters, for automated mailings (e.g. welcome mailing) as well as for advertising campaigns in social networks and online advertising on other websites, we also use the Salesforce Marketing Cloud. For this purpose, the newsletter subscriber data is transferred to the Marketing Cloud. The Salesforce Marketing Cloud data is stored and processed on Salesforce servers in the USA. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the legality and security of data processing. As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, Salesforce uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Salesforce undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

With the help of so-called web beacons and pixels as well as the tracking service iGoDigital, which belongs to Salesforce, we receive information about the click behavior of users via the Marketing Cloud. Interaction data is stored in the Marketing Cloud directly to the user so that we can send you more targeted advertising via the AdStudio, e.g. also via social networks. We can further define the groups of users to whom the advertisements are to be displayed ("Custom Audiences"). For this purpose, personal data is shared with Facebook (including Instagram), Google, Twitter, Pinterest and LinkedIn after pseudonymization according to the SHA 256 procedure.

If you do not wish to do so, you have the option, on the one hand, of exhibiting personalized advertising in your account settings on the social networks. In addition, you can use a different email address for the newsletters or registration with us than the one for your social media accounts.

The data in Salesforce Salescloud and Salesforce Marketing Cloud is used exclusively by us. Under no circumstances will your data be sold to third companies, persons or institutions.

The processing of your data in the Salesforce Service Cloud is based, where relevant, on our legitimate interest in using a CRM system pursuant to Art. 6 para. 1 lit. f) DSGVO , otherwise on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) DSGVO. The processing of your data in the Salesforce MarketingCloud is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO.

For more information on the Salesforce Service Cloud and the Salesforce Marketing Cloud, please refer to the Salesforce privacy policy, which you can access at the following URL: https://www.salesforce.com/en/company/privacy/

7.12 Data processing for the purpose of shipment handling

For the fulfillment of the contract pursuant to Art. 6 para. 1 p. 1 lit. b DSGVO, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

If you have given us your express consent to do so during or after your order, we will pass on your telephone number and, if applicable, your e-mail address to the selected shipping service provider on the basis of this consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, so that the shipping service provider can contact you before delivery for the purpose of delivery notification or coordination. The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

As shipping service provider we use:

Parcel One

Otto-Hahn-Strasse 21

35510 Butzbach,

Duitsland

7.13 Cookiebot

We use the consent management service Cookiebot, of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This allows us to obtain and manage the consent of website users for data processing. The processing is necessary for compliance with a legal obligation (Art. 7 para. 1DSGVO) to which we are subject (Art. 6 para. 1 p. 1 lit. c DSGVO). For this purpose, the following data is processed with the help of cookies:

Your IP address (the last three digits are set to '0'). Date and time of consent. Browser information URL from which the consent was sent. An anonymous, random and encrypted key Your end-user consent status, as proof of consent.

The key and consent status are stored in the browser for 12 months using the "CookieConsent" cookie. This preserves your cookie preference for subsequent page requests. With the help of the key, their consent can be proven and tracked.

If you enable the service function "Collective Consent" to enable consent for multiple websites by a single end-user consent, the service additionally stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in the third-party cookie "CookieConsentBulkTicket" in your browser in encrypted form: you enable the collective consent feature in the service configuration. You allow third-party cookies via browser settings. You have disabled "Do not track" via browser settings. You accept all or at least certain types of cookies when you give consent.

The functionality of the website is not guaranteed without the processing.

Cybot is a recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. You can find more information about objection and removal options vis-à-vis Cybot at: https://www.cookiebot.com/en/privacy-policy/.

Your personal data will be deleted continuously after 12 months or immediately after the termination of the contract between us and Cybot.

Please refer to our general statements about deletion and deactivation of cookies in this declaration.

7.14 Maxmind geolocation

On our website, we use the GeoIP2 Country database, which is provided by the provider MaxMind Inc, 14 Spring Street, 3rd Floor, Waltham, MA 02451, USA. The database associates approximate location/geolocation data with the IP addresses used based on the country of origin of the IP address. Using these databases, your location is estimated at the country level based on the identified IP address. Based on this, your view of our website is automatically set to the appropriate country of delivery, currency and language. The database is installed locally at our site. There is no connection to servers of MaxMind. No personal data is passed on to third parties.

The evaluation of your IP address to estimate your country location is based on Art. 6 para. 1 f DSGVO. The website operator has a legitimate interest in the correct display of delivery country-specific content on the website. Further information can be found at: https://support.maxmind.com/. You can retrieve the notes on data protection at: https://www.maxmind.com/en/privacy-policy.

7.15 Semknox

Our website uses a service of SEMKNOX GmbH, Webergasse 1, 01067 Dresden, Germany, for the internal product search. With this you will be shown the matching products to your search query via our website. For this purpose, your search query is transmitted directly to SEMKNOX. This also includes the transmission of your IP address and, if applicable, a random session ID. The IP address is used for IT and system security purposes and is anonymized within 12 days by shortening the last eight digits.

To enable the search function, SEMKNOX uses so-called "cookies", i.e. text files that are stored on your computer and are active for 24 hours. The information generated by the cookie about your use of the search function is transmitted to a server hosted by SEMKNOX in Germany. On our behalf, SEMKNOX will use this information to answer your search query and to optimize the search function used. You can deactivate the use of cookies in your browser or object to the use of the tool with the help of the Consent tool we use by not giving your consent. In this case, however, the use of the search function may not be possible or only possible to a limited extent.

The processing of the information generated by the cookie and transmitted to SEMKNOX is based on Art. 6 para. 1 lit. f) DSGVO for the purpose of demand-oriented design of our website and optimization of our offer.

7.16 Facebook

Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").

If a user clicks on an advertisement placed by us and played on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our site allows data sharing with Facebook via Pixel, this URL parameter is inscribed in the user's browser via a cookie that our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.

With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The data collected is anonymous for us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook as well as its partners to place advertisements on and outside of Facebook.

The data processing associated with the use of the Facebook Pixel is only carried out with your express consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

7.17 Pinterest-Retargeting-Pixel

A pixel (Pinterest tag) of Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is integrated on this website. With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored and analyzed in pseudonymized form. The information can be assigned to the person of the user with the help of further information that Pinterest has stored about the user, e.g. due to the ownership of an account on the social network "Pinterest".

Pinterest uses an algorithm to analyze the surfing behavior and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with other information that Pinterest has collected via other websites and / or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. In no case, however, can the information collected be used to personally identify visitors to this website.

All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website

7.18 Pinterest-Tag Conversion-Tracking

This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). If you have reached our website from a pin on Pinterest, we will set a cookie on your computer that interacts with a likewise implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.

If the user is redirected from a pin on Pinterest to pages on this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, searches on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, with which certain information about the action (including type of action, time, browser type of the end device) is transmitted.

Through this transmission, Pinterest can create statistics about the usage behavior on our website after forwarding from a Pinterest Pin, which serve us to optimize our offer.

However, we do not receive any information with which users can be personally identified.

All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

7.19 Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.

When using Google Analytics 4, so-called "cookies" are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there.

This may also result in the transmission of information to the servers of Google LLC, which is based in the USA, and further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.

On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior and to provide us with further services related to your website usage and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function known as "demographic characteristics". This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures.

However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a DSGVO. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.

In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and linked your Internet-enabled end devices to your Google account, Google can analyze usage behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) a DSGVO. The logins and device types of all website users who were logged into a Google account and executed a conversion are taken into account. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place. We do not receive any personal data from Google in this regard, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalized ads" function in the settings of your Google account and thus turning off the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en

Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en

We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.

To ensure compliance with the European level of data protection, even in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites.

7.20 Google Custom Match

In connection with the use of our newsletter, we use Google Customer Match based on your consent (Art. 6 para. 1 a) DSGVO). In this process, we upload encrypted email addresses to a Google portal in order to advertise in a personalized manner to our customers who are also Google users. For this purpose, the addresses are encrypted locally on our systems, i.e. converted into a combination of different letters and numbers ("hashed"), and transmitted to Google. Google compares these hash values with all Google users and can thus determine which of our customers also uses Google products. Subsequently, we can place advertisements in Google search, in Gmail, on YouTube and in the so-called display network. When placing the ads, Google takes into account other information linked to your Google account, which can also be obtained on third-party websites. We can also reach new people through the ads who are likely to be interested in our products because they are similar to our previous customers. You can prevent the collection of data generated by the cookies and related to your use of this website, as well as the processing of this data by Google, by accessing the Google advertising setting and setting the switches for personalization to "Off".

7.21 Criteo (Criteo SA)

On this website, the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo") uses cookie text files to collect, store and analyze information about the surfing behavior of website visitors in pseudonymized form. Criteo uses an algorithm to analyze the surfing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). In no case can the collected data be used to personally identify the visitor to this website. No other use or disclosure to third parties will take place.

All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

7.22 Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Additional data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the web. In this case, if they are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. In the course of using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.

Details on the processing triggered by Google Ads Remarketing and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?

Further information and the privacy policy regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/

All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

7.23 AB Tasty

deleted

7.24 AWIN Performance Advertising Netzwerk

We participate in the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter "AWIN"). As part of its tracking services, AWIN stores cookies for the documentation of transactions (e.g., of "sales leads") on end devices of users who visit or use websites or other online offers of its customers (e.g., register subscription to a newsletter or submit an online order). These cookies serve the sole purpose of a correct allocation of the success of an advertising medium and the corresponding billing within the framework of its network.

Only the information about when a certain advertising medium was clicked on by an end device is placed in a cookie. In the AWIN tracking cookies, an individual sequence of numbers, which cannot be assigned to the individual user, is stored with which the partner program of an advertiser, the publisher, and the time of the user's action (click or view) are documented. AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser.

All processing described above, in particular the reading of information on the terminal device used, only takes place if you have given your express consent to this in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

For more information on the use of data by AWIN, please refer to the company's privacy policy: https://www.awin.com/en/rechtliches

7.25 Makaira A/B-Testing

This website performs analyses of user behavior via so-called A/B testing. This allows us to show you our website with varied content, depending on a profile assignment that has been made. This allows us to analyze and regularly improve our offer and make it more interesting for you as a user. The legal basis for A/B testing is our legitimate interest in product improvement in accordance with Art. 6 Para. 1 lit. f DSGVO.

The service provider for the analysis is Makaira GmbH, Rudolf-Diesel-Str. 11, 69115 Heidelberg. Information from the third-party provider on data protection is available at https://www.makaira.io/de/datenschutz. The legal basis for the processing is, where applicable, Art. 6 para. 1 lit. f DSGVO (legitimate interest), otherwise your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

Cookies are stored on your computer for this evaluation. The information collected in this way is stored by the responsible party exclusively on its server in the EU. You can prevent the evaluation by deleting existing cookies and blocking the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use our website in full.

Before the analyses are carried out, the IP addresses are processed in abbreviated form, so that a direct link to a person can be ruled out. The IP address transmitted by your browser is not merged with other data collected by us.

Preventing the storage of cookies is possible through the setting in your web browser. Preventing the use of A/B testing is possible by activating the opt-out plug-in. Furthermore, you can prevent the processing of your data by not giving us consent to data processing using the consent tool we use.

Another service provider of the analysis is Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland with the service Google Optimize. Information from the third-party provider on data protection is available at https://policies.google.com/privacy?hl=en&gl=en. The legal basis for the use of third parties is Art. 6 para. 1 lit. f DSGVO (legitimate interest).

7.26 Makaira Analyse

We use analysis tools from Makaira GmbH, Rudolf-Diesel-Strasse 11, 69115 Heidelberg (hereinafter Makaira) on our website. An order processing contract has been concluded with Makaira. Makaira enables the website operator to analyze the use of the website by website visitors using the open source software Matomo. This involves various usage data, such as page views, dwell time, device categories, operating system (e.g. PC with Windows operating system) and origin of the user (e.g. access to the site via paid advertisements or unpaid search results) or contents of the current shopping cart. This data is summarized by Makaira in a profile that is assigned to the respective user or their end device. Based on the collected data, Makaira creates a forecast about the preferences of the website visitors. Depending on the preferences determined, the products in the store are then presented to the customer in a specific order or suitable product suggestions are made.

The use of Makaira is based on our legitimate interest in an optimal promotional presentation of its products (Art. 6 para. 1 p. 1 lit. f DSGVO). If consent has been requested, the data is processed exclusively on the basis of Art. 6 para. 1 p. 1 lit. a DSGVO. The consent can be revoked at any time with effect for the future.

The profiles created with the help of Makaira are stored exclusively anonymously.

7.27 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google LLC.server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures.However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.

Details on the processing triggered by Google Analytics and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of Google Analytics cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google Analytics will not be used during your visit to the site.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

7.28 Use of Youtube videos

This website uses the Youtube embedding function to display and play videos of the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Regardless of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a DSGVO. Without this consent, Youtube videos will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website via alternative options communicated to you on the website.

For further information on data protection at "Youtube", please refer to the Youtube terms of use at https://www.youtube.com/static?template=terms and Google's privacy policy at https://www.google.de/intl/en/policies/privacy.

7.29 My-Fonts-Counter

We use so-called WebFonts from the company MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA for the uniform display of fonts. If you agree to the use of cookies from WebFonts by means of the Consent tool we use, the following data will be collected when you access the page:

- IP address,

- date and time of the request,

- the amount of data transferred and the requesting provider.

The legal basis is Art. 6 para 1 a) DSGVO. You can revoke the use by deselecting the cookies at any time. The purpose of the data processing is the counting of page views and the billing of MyFonts based on this. The data is stored until the purpose is achieved.

7.30 Use of tracking technology by XAD spoteffects

We collect data to measure the use of our digital offering. Our website uses services provided by XAD spoteffects (XAD spoteffects GmbH, Saarstr. 7, 80797 Munich, Germany, https://xadspoteffects.com/), a third-party company, to analyse our users’ browsing habits on the basis of their consent (Art. 6(1)(a) GDPR). To do this, XAD spoteffects uses cookies that track how the user interacts with our website. XAD spoteffects collects information provided by the browser, such as IP addresses and proxy IP as well as language and time zone, for geolocation purposes relating to the user, user agent (e.g. computer, tablet, mobile device) and to determine whether the user carries out certain activities on the website. The data is collected and evaluated exclusively in pseudonymous form, meaning that as a basic principle no conclusions can be drawn about your identity. The cookies of XAD spoteffects are deleted after 12 months at the latest. You can object to or revoke your consent to the use of cookies at any time on the cookie banner. For more information about XAD spoteffects cookies and how they are used, please see the XAD spoteffects privacy policy here: https://xadspoteffects.com/en/privacy-policy#page-content

7.31 Kameleoon

With your consent, our website uses services provided by Kameleoon GmbH, Beim Alten Ausbesserungswerk 4, 77654 Offenburg, Germany (as the German representative of SAS Kameleoon, 12 rue de la Chaussée d'Antin, 75009 Paris, France).

We use the services to optimise our website and personalise the content.

Kameleoon enables an analysis of user behaviour based on user segmentation. This enables us to evaluate how individual user segments use the website so that it can be continuously improved.

To perform the analysis, Kameleoon uses cookies that are linked to your pseudonymised ID. As part of this analysis, your IP address is completely anonymised and not stored. The user behaviour and the information generated by the cookie are transmitted to a Kameleoon server in Germany and stored there in aggregated and pseudonymised form. The IP address transferred from your browser within the scope of the Kameleoon services is not linked with other Kameleoon data. The anonymised data that is collected is evaluated over a maximum period of 365 days.

The legal basis and possibility of withdrawal for this data processing is your consent pursuant to Article 6, Para. 1 a) GDPR. You can withdraw your consent at any time with future effect by accessing the cookie settings and changing your selection there.

More information about how Kameleoon processes your data can be found at: https://www.kameleoon.com/en/privacy-policy.

8. Use of customer data for direct advertising

>

8.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will use your e-mail address to send you our newsletter regularly for marketing purposes and to track usage behavior. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified e-mail address.

By activating the verification link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. In doing so, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. If you use our newsletter, we carry out personalized tracking of your usage behavior based on your consent pursuant to Art. 6 (1) a) DSGVO. This enables us, for example, to determine whether you have received and opened the newsletter and which content you have clicked on there. Based on your user behavior, we send you advertising content tailored to you.

The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement. It may be that you will then still receive an issue of the newsletter from us for technical reasons.

8.2 Newsletter dispatch via Salesforce

Our email newsletters are sent via Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (hereinafter "Salesforce"), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f DSGVO and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on Salesforce's servers in the EU.

Salesforce uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the newsletters sent by e-mail contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on such links. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded an order processing agreement with Salesforce, with which we oblige Salesforce to protect our customers' data and not to pass it on to third parties.

You can read more information about Salesforce's data analysis here: https://www.salesforce.com/en/company/privacy/.

8.3 Goods availability notification by e-mail

For temporarily unavailable items, you can sign up to receive email merchandise availability notifications. In this case, we will send you a one-time e-mail message about the availability of the item you have selected. Mandatory information for sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. In doing so, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later point in time. The data we collect when you register for our goods availability e-mail notification service is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

8.4 Data processing for order processing

Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period within the framework of our legal information obligations pursuant to Art. 6 (1) lit. c DSGVO by suitable means of communication (e.g. by post or e-mail). Your contact data will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

 

9. Online applications via a form

On our website, we offer job applicants the opportunity to apply online using a corresponding form. In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection via the form.

Required information includes general personal information (the name, address, a telephone or electronic means of contact) and performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which must be given special consideration under labor and social law in the interest of social protection in the person of the applicant.

Im Zuge des Absendens des Formulars werden die Bewerberdaten entsprechend dem Stand der Technik verschlüsselt an uns übermittelt, von uns gespeichert und ausschließlich zum Zwecke der Bewerbungsbearbeitung ausgewertet. Rechtsgrundlage für diese Verarbeitungen ist grundsätzlich Art. 6 Abs. 1 lit. b DSGVO (bei Verarbeitungen in Deutschland i.V.m. § 26 Abs. 1 BDSG), in deren Sinne das Durchlaufen des Bewerbungsverfahrens als Arbeitsvertragsanbahnung gilt.

Soweit im Rahmen des Bewerbungsverfahrens besondere Kategorien von personenbezogenen Daten im Sinne des Art. 9 Abs. 1 DSGVO (z.B. Gesundheitsdaten wie Angaben über die Schwerbehinderteneigenschaft) bei Bewerbern angefragt werden, erfolgt die Verarbeitung gemäß Art. Art. 9 Abs. 2 lit. b. DSGVO, damit wir die aus dem Arbeitsrecht und dem Recht der sozialen Sicherheit und des Sozialschutzes erwachsenden Rechte ausüben und unseren diesbezüglichen Pflichten nachkommen können.

Kumulativ oder alternativ kann die Verarbeitung der besonderen Datenkategorien auch auf Art. 9 Abs. 1 lit. h DSGVO gestützt sein, wenn sie zu Zwecken der Gesundheitsvorsorge oder der Arbeitsmedizin, für die Beurteilung der Arbeitsfähigkeit des Bewerbers, für die medizinische Diagnostik, die Versorgung oder Behandlung im Gesundheits- oder Sozialbereich oder für die Verwaltung von Systemen und Diensten im Gesundheits- oder Sozialbereich erfolgt.

Kommt es im Zuge der oben beschriebenen Auswertung nicht zu einer Auswahl des Bewerbers oder zieht ein Bewerber seine Bewerbung vorzeitig zurück, werden dessen formularmäßig übermittelten Daten nach einer entsprechenden Benachrichtigung spätestens nach 6 Monaten gelöscht. Diese Frist bemisst sich auf Grundlage unseres berechtigten Interesses daran, etwaige Anschlussfragen zu der Bewerbung zu beantworten und gegebenenfalls unseren Nachweispflichten aus den Vorschriften zur Gleichbehandlung von Bewerbern nachkommen zu können.

Im Falle einer erfolgreichen Bewerbung werden die bereitgestellten Daten auf Basis des Art. 6 Abs. 1 lit. b DSGVO (bei Verarbeitungen in Deutschland i.V.m. § 26 Abs. 1 BDSG) für die Zwecke der Durchführung des Beschäftigungsverhältnisses weiterverarbeitet.

 

10. Applications to job advertisements by e-mail

On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Inclusion in the application process requires that applicants provide us with all personal data required for a well-founded and informed assessment and selection together with the application by e-mail.

The required information includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position.

If necessary, health-related information may also be required, which must be given special consideration under employment and social law in the interest of social protection in the person of the applicant.

The components that an application must contain in individual cases in order to be considered and the form in which these components must be submitted by mail can be found in the respective job advertisement.

After receipt of the application sent using the specified e-mail contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application.For queries arising in the course of processing, we use, at our discretion, either the e-mail address provided by the applicant with his or her application or a telephone number provided.

The legal basis for this processing, including contacting us for queries, is generally Art. 6 Para. 1 lit. b DSGVO (for processing in Germany in conjunction with Section 26 Para. 1 BDSG), in the sense of which the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO (e.g. health data such as information on the severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. DSGVO. DSGVO so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) h. DSGVO if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, his or her data transmitted by e-mail and all electronic correspondence, including the original application e-mail, will be deleted at the latest after 6 months following notification. This period is measured on the basis of our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b DSGVO (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of implementing the employment relationship.

 

11. Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent.

If there are legal retention periods for data that is processed in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 (1) (b) DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part to continue storing it.

When processing personal data on the basis of Art. 6 (1) f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Article 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

 

12. Data sharing

Within Beurer GmbH, those departments will receive access to the data that need it to fulfill contractual and legal obligations. External service providers of Beurer GmbH may also receive this data.

These service providers can be:

- The service providers named in this data protection declaration, insofar as they are involved in the use of the corresponding services or another authorization basis is given (e.g. our legitimate interest in the data processing, insofar as we can base the processing on this).

- Affiliated companies, insofar as these are required for the fulfillment of the contract

- Service providers for the processing of customer service requests

- IT service providers, hosting service providers and service providers for the operation of the IT system

- Service providers for newsletter dispatch if consent has been given

 

13. Letter dispatch

Letter mailing The data (name, company, address) of existing customers is stored and can be used for letter mailings, such as invitation letters. The legal basis is Art. 6 (1) f) DSGVO, the data will be stored in compliance with the more extensive statutory provisions (e.g. retention obligations) until the end of the contractual relationship or until revocation. You can object to this procedure at any time with effect for the future by email to datenschutz@beurer.de.