Data protection Röckelein GmbH

Privacy Policy

Introduction and general information

We appreciate your interest in our website and take the protection of your personal data very seriously. The following information details how we handle the data collected through your use of our website. Your data is processed in accordance with the legal regulations on data protection.

Responsible party within the meaning of the DSGVO

Röckelein GmbH

Neue Reichenbacher Straße 15

08496 Neumark

Phone

Contact information for the data protection officer

Data protection officer

Leopoldstr. 21

80802 Munich

datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please be sure to specify the company to which your inquiry relates. Please note that attachments containing sensitive information, such as a copy of your ID, cannot be accepted.

Definitions

Our privacy policy is designed to be straightforward and easily comprehensible to all. This privacy policy primarily utilizes the official terminology of the General Data Protection Regulation (GDPR). The official definitions are delineated in Art. 4 GDPR.

Access to and storage of information in terminal equipment

By using our website, information (e.g., IP address) may be accessed or stored (e.g., cookies) on your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In situations where access to information or storage of information is absolutely essential for the technically error-free provision of our services, this is carried out in accordance with Section 25 (1) sentence 1, (2) no. 2 TDDDG.

In instances where such a process serves alternative purposes (e.g., the needs-based design of our website), this is carried out on the basis of Section 25 (1) TDDDG solely with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The processing of your personal data is subject to the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

You can find further information on the processing of your personal data and the relevant legal basis in this context in the following sections on the specific processing activities on our website.

Web hosting

This website is hosted by an external service provider (host).

This website is hosted in Denmark by team.blue Denmark A/S. Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, website accesses, and other data generated via a website.

We collect the listed data to ensure a smooth connection to our website and the technically error-free provision of our services. The processing of this data is absolutely necessary to make our website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 (1) lit. f GDPR.

We are pleased to announce that we have successfully concluded a data processing agreement with the provider. This agreement is compliant with the stipulations outlined in Article 28 of the General Data Protection Regulation (GDPR). As part of this agreement, we hold the provider to stringent standards of protecting our customers' data and prohibiting its transfer to third parties.

Contact form and contact by email

Should you choose to submit inquiries via the contact form or email, your details from the inquiry form or your email, including the personal data you provided there, will be stored in our system for the purpose of processing the inquiry and in case of follow-up questions.

In order for us to contact you, we require an email address and company name. Providing your first and last name, address, and telephone number is optional. We will not disclose this data without your consent. We process the data on the legal basis of our legitimate interest in responding to your request, in accordance with Art. 6 (1) lit. f GDPR. If your request is aimed at concluding a contract, we also rely on Art. 6 (1) lit. b GDPR. Following the processing of your request, your data will be deleted, unless there are legal retention obligations that supersede this action. In the case of Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data at any time.

Registration

You may register for certain services provided on our website, thereby creating a user profile. As part of the registration and setup process, we collect and use the following personal data:

• First and last name
• Company name
• Address
• Sales tax identification number
• Email address
• Date and time of registration
• Additionally, you have the option of providing voluntary information, such as your telephone number. Mandatory information that is provided for the purpose of registration is marked with an asterisk in the input mask as a mandatory field. With your user account, you can access other parts of our website and log in to the offers you have purchased.

The legal basis for data processing is set out in Article 6 (1) (a) GDPR or Article 6 (1) (b) GDPR, depending on whether the processing is necessary for the provision of the services requested. Your data will be deleted as soon as the user account on our website is deleted, provided that there are no legal retention obligations. You can usually change and/or delete your user account, including the data you have provided, directly in your user account after logging in, or by sending a message to the controller mentioned at the beginning.

Registration of a customer account

You have the option of creating a customer account in our online shop to order goods. When you register and set up your customer account, we collect and use the following personal data:

• First name • Last name • Company name • Company address (street, postal code, city, country) • Company email address

Please note that the following information is mandatory for registration:

Company telephone number Company VAT identification number Date and time of registration This information is marked as a mandatory field in the input mask with a pop-up field.

Please also note that orders can be placed as guest customers and by existing customers who have already received shop access from us.

Access data includes the customer number, email address, and password.

The system stores data from shop orders placed by existing customers or from inquiries made by interested parties in a customer file.

This file also includes the description of the type and number of goods ordered and/or requested.

This ensures the proper processing of the order/inquiry, including shipping and invoicing.

The legal foundation for collecting data necessary to establish a customer account and facilitate purchases is outlined in Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR).

Regarding the handling of voluntarily provided information, the legal basis for data processing is consent, as detailed in Art. 6 (1) lit. a of the GDPR.

Your data will be deleted as soon as the user account on our website is deleted, provided that there are no legal retention obligations. You can usually change and/or delete your customer account, including the data you have provided, directly in your user account after logging in, or by sending a message to the controller mentioned above.

Newsletter

Should you wish to subscribe to the newsletter offered on our website, which will provide regular information about our offers and products, we will require your email address.

If you would like us to address you personally in the newsletter and/or to identify you if you wish to exercise your rights as a data subject, we will also need to collect some additional data.

We utilise the double opt-in procedure to distribute our newsletter. This ensures that we will only send the newsletter by email once you have expressly confirmed your agreement to receive such communications. In the first step, you will receive an email with a link that you can use to confirm that you, as the owner of the email address in question, wish to receive newsletters in the future. By providing your confirmation, you grant us your consent as outlined in Art. 6 (1) (a) GDPR, allowing us to utilize your personal data for the specific purpose of sending you the newsletter.

When you subscribe to the newsletter, we store the email address required for sending the newsletter, the IP address from which you subscribed, and the date and time of your subscription and confirmation. We do this in order to be able to trace any possible misuse at a later date. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Should you wish to unsubscribe from the newsletter, you may do so at any time by clicking on the link included in each newsletter or by sending an email to the controller named above. Once you have completed the unsubscribe process, your email address will be removed from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is otherwise permitted by law.

Please note that the use of payment service providers is subject to their own terms and conditions.

When purchasing our products via our online shop, we offer customers efficient and secure payment options. We use banks, credit institutions, and other payment service providers (collectively referred to as “payment service providers”) for this purpose.

Depending on the payment option selected during the order placement process, the necessary data for processing the payment will be transmitted to the designated credit institution or payment service provider responsible for the transaction. The transfer of data to payment service providers is necessary for the performance of the contract (Art. 6 (1) (b) GDPR) and to ensure a smooth, convenient, and secure payment process (Art. 6 (1) (f) GDPR).

The data processed by payment service providers includes inventory data (e.g., name and address), bank details (e.g., account numbers or credit card numbers), passwords, TANs, and checksums, as well as contract, sum, and recipient-related information and meta/communication data (e.g., device information and IP addresses). This information is essential for processing transactions. However, the data provided is exclusively managed and stored by the payment service providers. This means that we do not receive any details related to your account or credit card; we only receive confirmation of the payment or its rejection.

In specific circumstances, the data may be transmitted by the payment service providers to credit agencies for the purpose of verifying identity and creditworthiness. For further information on this process, please refer to the terms and conditions and privacy policy of the payment service providers.

Payment transactions are subject to the terms and conditions and privacy policy of the respective payment service providers, which can be found on their websites or transaction applications.

For further information and the assertion of rights of revocation, information, and other rights of data subjects, we also refer to these.

Services used and service providers:

• Google Pay: The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy can be found here:
• https://policies.google.com/privacy
• PayPal provides payment services, and the service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. You can find PayPal's privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
• QuickPay provides payment services.
• The service provider is QuickPay ApS, Vesterbro Torv 1, 8000 Aarhus C, Denmark.
• You can find QuickPay's privacy policy here.

Server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• • Domain visited
  • Date and time of the request
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser and operating system used
  • IP address of the requesting computer
  • Amount of data transferred
• We collect the aforementioned data in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you.

The log files are used to evaluate system security and stability and for administrative purposes. The legal basis for processing the data is our legitimate interest in protecting and ensuring the functionality of our website in accordance with Art. 6 (1) lit. f GDPR.

For reasons of technical security, in particular to defend against attempts to attack our web server, we store this data for a short period of time. In accordance with our company's strict data anonymization protocol, the IP addresses are shortened at the domain level within 30 days at the latest, ensuring that no connection can be established to the individual user.

The log files are stored for a maximum of 30 days and subsequently deleted through a daily automated cleanup procedure (“cleanup logs”). This data is not merged with other sources or disclosed to third parties.

Cookies

Our website uses so-called “cookies.” Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies perform a variety of functions. Many cookies are technically essential, as certain website functions, such as the shopping cart function or language settings, would not work without them. Other cookies are used to evaluate user behavior or to display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 (1) (f) GDPR, in order to ensure the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing operations.

The processing of personal data through the use of other cookies is contingent upon obtaining consent, as stipulated in Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent for the use of cookies can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you separately in this privacy policy and obtain your consent in accordance with Art. 6 (1) (a) GDPR.

It is possible to configure your browser so that you are notified about the setting of cookies, and to decide on a case-by-case basis whether to allow cookies, or to automatically reject them.

You can also set your browser to delete cookies automatically when you close the browser.

The cookie settings can be managed for the respective browsers under the following links:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

In addition, cookies can be managed from a variety of companies and functions used for advertising on an individual basis. To do so, please use the appropriate user tools, which are available at https://www.aboutads.info/choices/or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers offer a “do not track” function that allows users to opt out of targeted advertising. When activated, this function informs advertising networks, websites, and applications that the user prefers not to be “tracked” for the purpose of behavior-based advertising and similar purposes.

Depending on your web browser, you can find information and instructions on how to edit this function at the following links:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows JavaScripts, Java, and other plug-ins to run exclusively on trusted domains of your choosing. For more information and detailed instructions on how to edit this function, please refer to your browser provider's resources (e.g., for Mozilla Firefox, visit: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please be advised that disabling cookies may limit the functionality of our website.

Changing cookie settings

You have the option to revoke or change your cookie settings at any time. To do so, simply call up the cookie settings again via our integrated thumbprint, which can be found at any time at the bottom left of the website.

or

You have the option to revoke or change your cookie settings at any time.

To do this, please refer to the cookie settings via this link (embed hyperlink to cookie settings).

External services

1. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”.

Google will process this information on behalf of the website operator in order to evaluate your use of the website and compile reports on website activity. In addition, Google will use this information to provide the website operator with other services related to the use of the website and the internet. The IP address sent by your browser as part of Google Analytics will not be combined with other data from Google. Processing is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of the consent you have given.

We only use Google Analytics with IP anonymization enabled. This means that your IP address will only be processed by Google in truncated form.

We have entered into a data processing agreement with the service provider, which obliges them to protect our customers' data and refrain from disclosing it to third parties.

Given Google's potential transfer of personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure a level of data protection that meets the standards of the GDPR.

With regard to the USA, the EU Commission has issued an adequacy decision in accordance with Article 45(1) GDPR for companies that have obtained certification under the EU-U.S. Data Privacy Framework. Google LLC has obtained certification under the EU-U.S. Data Privacy Framework, signifying its commitment to adhering to rigorous data protection standards. For more information, please refer to the following link:

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Should you wish to view the terms of use for Google Analytics, as well as information on data protection, you can find these via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Data at the user and event level that is linked to cookies, user IDs (e.g., user ID) and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA [Apple identifier for advertisers] will be deleted no later than 14 months after it is collected.

You can prevent cookies from being stored by adjusting the settings in your browser software accordingly. However, please note that in this case you may not be able to use all the functions of this website to their full extent. You can opt out of Google's collection of data generated by the cookie and prevent the analysis of your use of the website (including your IP address) by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de.

1. Google Ads Remarketing

Our website utilizes the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With your consent, this feature enables the integration of advertising target groups created with Google Ads Remarketing into the cross-device capabilities of Google Ads and Google Marketing Platform. The legal foundation for this processing is your consent in accordance with Art. 6 (1) (a) GDPR, § 25 (1) TTDSG. In this way, interest-based, personalized advertising messages that have been tailored to the user based on their previous usage and surfing behavior on one device (e.g., cell phone) can also be displayed on another of their devices (e.g., tablet or PC).

Google will link your web and app browsing history to your Google account for this purpose if you have given your consent. This allows the same personalized advertising messages to be displayed on every device on which you log in with your Google account.

Google Analytics has developed a system that utilizes user authentication IDs to support this feature.

These IDs are temporarily linked to Google Analytics data to define and create target groups for cross-device advertising.

Should you wish to opt out of cross-device remarketing/targeting on a permanent basis, you may do so by disabling personalized advertising in your Google account. To do this, please follow this link:

Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA. Therefore, additional safeguards are required to ensure the level of data protection provided by the GDPR.

Regarding the US, the EU Commission has issued an adequacy decision under Article 45(1) GDPR for companies certified under the EU-U.S. Data Privacy Framework. Google LLC has obtained certification under the EU-U.S. Data Privacy Framework, thereby committing the company to adhere to prescribed data protection standards. For further details, please refer to the following link:

We have also agreed standard data protection clauses with the provider for potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, in accordance with Art. 46 (2) lit. c GDPR. The recipient of the data in the third country is obliged to process the data in accordance with the level of protection in Europe.

Further information and the data protection provisions can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/.

1. Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager is a solution that enables the management of website tags via an interface. Please note that Google Tag Manager solely facilitates the implementation of tags. Please note that no cookies are used, and only the user's IP address is transmitted to Google to establish a connection. Google Tag Manager triggers other tags, which in turn may collect data; however, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided they are implemented with Google Tag Manager.

We use Google Tag Manager based on your consent in accordance with Art. 6 (1) (a) GDPR.

Given Google's potential transfer of personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection mandated by the GDPR.

Regarding the USA, the EU Commission has issued an adequacy decision under Article 45(1) GDPR for companies certified under the EU-U.S. Data Privacy Framework. Google LLC has obtained certification under the EU-U.S. Data Privacy Framework, thereby committing to adhere to the stipulated data protection standards. These standards can be accessed via the following link: For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c GDPR.

These require the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

D. Google Marketing Platform (formerly DoubleClick)

This website uses DoubleClick from the Google Marketing Platform, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”).

DoubleClick uses cookies to present potential customers with advertisements that are relevant to them. A pseudonymous identification number (ID) is assigned to their browser or device to check which ads have been displayed and which have been clicked on. This can improve campaign performance or, for example, prevent customers from seeing the same ad multiple times. Additionally, Google utilizes cookie IDs to track conversions associated with ad requests. An illustration of this would be when a user views a Campaign Manager ad and subsequently visits the advertiser's website on the same browser and initiates a purchase. Google has confirmed that the cookies do not contain any personal information. By giving us your consent, you are agreeing to the processing of data in accordance with Art. 6 (1) (a) GDPR. The technology used means that your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool, and we therefore inform you according to our current state of knowledge.

Google receives information about visits to our website via the DoubleClick integration. This includes the pages you access or the ads you click on. If you have a registered Google account, Google can assign the visit to your account. Even if you don't have a Google account or have not logged in, the provider may still be able to identify and store your IP address.

Given Google's potential transfer of personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure a data protection level in line with that mandated by the GDPR. Regarding the USA, the EU Commission has issued an adequacy decision under Article 45(1) GDPR for companies certified under the EU-U.S. Data Privacy Framework. Google LLC has obtained certification under the EU-U.S. Data Privacy Framework, thereby committing to adhere to stipulated data protection standards. These standards can be accessed via the following link: For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR.

The recipient of the data in the third country is obliged to process the data in accordance with the level of protection in Europe.

Further information on the Google Marketing Platform is available at https://marketingplatform.google.com/about/ and on data protection at Google in general at https://www.google.de/intl/de/policies/privacy.

1. Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and the reviews collected, as well as to offer Trusted Shops products to buyers after they have placed an order.

The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. Trusted Shops collects data in order to provide security for purchases made in online shops verified by Trusted Shops.

Whenever the Trustbadge is accessed, the web server automatically generates a server log file that contains details such as your IP address, the date and time of the access, the amount of data transferred, and the requesting provider. This access data is documented for reference. Please note that this access data is not subject to evaluation and is automatically overwritten after a maximum of seven days following the end of your visit to the site.

Further personal data will only be transferred to Trusted Shops with your explicit consent, if you opt to utilize Trusted Shops products following the completion of an order, or if you have previously registered to use them. In such instances, the contractual agreement between you and Trusted Shops will apply.

This helps to protect our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 (1) (f) GDPR, which prevail in the context of a balancing of interests.

The data collected will be stored until you request us to delete it, until Trusted Shops GmbH deletes it itself, or until the purpose for data storage no longer applies.

Mandatory statutory retention periods remain unaffected. Details on data processing by Trusted Shops GmbH can be found at the following link:

For what purposes does Trusted Shops process the data? – Help - Trusted Shops

The privacy policy of Trusted Shops GmbH can be found here: Legal notice and privacy policy - Trusted Shops

External links

Social networks (e.g., LinkedIn and Facebook) are only integrated into our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. Only after the redirection will user information be transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.

Data Transfer and Recipients

Your personal data will not be transferred to third parties, except in the following instances:

• if we have explicitly indicated this in the description of the respective data processing, • if you have given your express consent in accordance with Art. 6 (1) (a) GDPR.

The transfer of your data is necessary for the assertion, exercise, or defense of legal claims pursuant to Art. 6 (1) (f) GDPR. There is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

Please note that there is a legal obligation for disclosure under Article 6(1)(c) of the General Data Protection Regulation (GDPR), as well as an obligation to the extent that this is necessary for the performance of contractual relationships with you under Article 6(1)(b) of the GDPR.

We also use external service providers to process our services. We have carefully selected these companies, and we have entered into written agreements with them. These agreements ensure that the service providers are bound by our instructions and are regularly monitored by us. This approach is in accordance with Art. 28 GDPR, where necessary. These include service providers for hosting, email transmission, and IT system maintenance and servicing. These service providers are prohibited from disclosing this data to third parties.

Data security

In accordance with Art. 32 GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

In determining the appropriate level of security, we take into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.

In the event that you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally relevant reasons for storing your personal data. Examples of such reasons include tax or commercial law retention periods. In the latter case, deletion will take place once these reasons no longer apply.

Information on your rights

Please find below information on the rights granted to you by the applicable data protection law with regard to the controller in relation to the processing of your personal data:

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. Specifically, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, and the existence of a right to rectification. You have the right to request deletion, restriction of processing, or objection to processing of your personal data. You also have the right to know the existence of a right of appeal, the origin of your data (if it was not collected by us), and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details.

You have the right to request the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR.

In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, unless the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, You have the right to exercise your opt-out rights under the GDPR, which means you can request that your personal data be provided to you in a structured, commonly used, and machine-readable format, or you can request that it be transferred to another controller.

This right is outlined in Article 20 of the GDPR.

You have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office, as indicated above, or, if applicable, that of your usual place of residence or workplace.

You also have the right to revoke consent granted in accordance with Article 7 (3) GDPR.

You have the right to withdraw your consent to the processing of data at any time, effective moving forward. If you choose to withdraw, we will promptly delete the relevant data, unless further processing can be supported by an alternate legal basis that does not require consent. Please note that the withdrawal of consent does not retroactively affect the lawfulness of processing that was previously based on consent.

Right to Object

In the event that your personal data is processed by our company on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that this objection is based on reasons arising from your particular situation.

You have the right to object to the processing of your personal data for the purpose of direct marketing. No explanation is necessary.

If you wish to exercise your right of revocation or objection, please send an email to:

Legal obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfillment of the contract, or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide the personal data that is necessary for the conclusion of the contract, the fulfillment of the contract, or pre-contractual measures.

Automated decision-making

We would like to confirm that automated decision-making or profiling, as defined in Article 22 of the General Data Protection Regulation (GDPR), is not a practice engaged in by our organization.

Reservation of changes

We reserve the right to amend or update this privacy policy as necessary to comply with applicable data protection regulations. This allows us to adapt it to current legal requirements and take into account changes to our services, e.g., when introducing new services. The current version applies to your visit.

Status of this privacy policy: September 12, 2025

6. Cookies und Webanalyse

Um den Besuch unserer Website attraktiv zu gestalten und die Nutzung bestimmter Funktionen zu ermöglichen, um passende Produkte anzuzeigen oder zur Marktforschung verwenden wir auf verschiedenen Seiten sogenannte Cookies. Dies dient der Wahrung unserer im Rahmen einer Interessensabwägung überwiegenden berechtigten Interessen an einer optimierten Darstellung unseres Angebots gemäß Art. 6 Abs. 1 S. 1 lit. f DSGVO. Cookies sind kleine Textdateien, die automatisch auf Ihrem Endgerät gespeichert werden. Einige der von uns verwendeten Cookies werden nach Ende der Browser-Sitzung, also nach Schließen Ihres Browsers, wieder gelöscht (sog. Sitzungs-Cookies). Andere Cookies verbleiben auf Ihrem Endgerät und ermöglichen uns, Ihren Browser beim nächsten Besuch wiederzuerkennen (persistente Cookies). Die Dauer der Speicherung können Sie der Übersicht in den Cookie-Einstellungen Ihres Webbrowsers entnehmen. Sie können Ihren Browser so einstellen, dass Sie über das Setzen von Cookies informiert werden und einzeln über deren Annahme entscheiden oder die Annahme von Cookies für bestimmte Fälle oder generell ausschließen. Jeder Browser unterscheidet sich in der Art, wie er die Cookie-Einstellungen verwaltet. Diese ist in dem Hilfemenü jedes Browsers beschrieben, welches Ihnen erläutert, wie Sie Ihre Cookie-Einstellungen ändern können. Diese finden Sie für die jeweiligen Browser unter den folgenden Links: